Static task
static1
Behavioral task
behavioral1
Sample
Payment Slip.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Payment Slip.exe
Resource
win10v2004-20230703-en
General
-
Target
Payment Slip.exe
-
Size
291KB
-
MD5
c2a4b173057bd8a9e303a4439f1fd01f
-
SHA1
e13532e118a7fb124ece4812ec16bb84431e07b8
-
SHA256
c3ef21643a3bafe4a9b6a2378d45e71af68de9fa78fd2d659619e17c7cf6c937
-
SHA512
38815043e9c3ba3a32b93bc91d7fa18f477275b50acf043ec357930d46f9dc34ee6d2e658b16cb466c0cfd5be02e4278f2abd14f40551a8d19e89617fc263fa1
-
SSDEEP
6144:VuII2Zm2C3b4jDcolr8vFBGuEXJ6VcKl17SKYvZmNk7sJkj3Ma3HzyH0G:FI2ZmPr4jDco+dwuCJ6XSK8mK7Zj3D+H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Payment Slip.exe
Files
-
Payment Slip.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 289KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ