Static task
static1
Behavioral task
behavioral1
Sample
PAYMENT APPLICATION COPY.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
PAYMENT APPLICATION COPY.exe
Resource
win10v2004-20230831-en
General
-
Target
c99a6571d727733173ff2de1f6e19dbab04cc3fdc5d977a1afc15e9b86865e50_JC.zip
-
Size
514KB
-
MD5
65a0ace2ce20102bb93b1671b12ad7ba
-
SHA1
c818777e85bbda16b36e192a8d07d729464035fd
-
SHA256
c99a6571d727733173ff2de1f6e19dbab04cc3fdc5d977a1afc15e9b86865e50
-
SHA512
91928c3098735a35705a742de6cdb363745b004ecc201c2780c72715d05079c82fdd3cb0fe994974b3669cc8aba87b7e1eaf9e7335ab0cb2c19f5cdc4d0e9d66
-
SSDEEP
12288:faCJMe4A6LWTZmOnWd7O8Zi96zDKCCNpr2jKqV4w/V1WAS:iCJMVjwZmOnaS8ZiUXKC+iKe1VS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PAYMENT APPLICATION COPY.exe
Files
-
c99a6571d727733173ff2de1f6e19dbab04cc3fdc5d977a1afc15e9b86865e50_JC.zip.zip
-
PAYMENT APPLICATION COPY.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 927KB - Virtual size: 926KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ