Static task
static1
Behavioral task
behavioral1
Sample
Payment copy.exe
Resource
win7-20230831-en
General
-
Target
NEAS.e7bcbb448ab7042091179cfd1a92ddf27ee7d11f07c8402e870e764e6038acfe_JC.rar
-
Size
729KB
-
MD5
ab37f0157109f57e435a480000d6a905
-
SHA1
4e0b25925005ace46fc9bdb50ea117ab1b41e73a
-
SHA256
e7bcbb448ab7042091179cfd1a92ddf27ee7d11f07c8402e870e764e6038acfe
-
SHA512
ded02b1797244a2d9e0e943a39c2e0de126ce954aa53c92da6df31ef1d9b0e964510e4a34aeaff79177347e4f2e01b8762b34bd30d8b7ff78168530c1ac97d85
-
SSDEEP
12288:np0rlTRNbZ3cUcUMG/g9/br8TU4Cc6rtT+HDCRnmtdOWoGzCjT+2SpqwUg4:npIzNd3iUMG/g1bAnCc6BTAWE+ACjKR4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Payment copy.exe
Files
-
NEAS.e7bcbb448ab7042091179cfd1a92ddf27ee7d11f07c8402e870e764e6038acfe_JC.rar.rar
-
Payment copy.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ