Static task
static1
Behavioral task
behavioral1
Sample
PAYMENT COPY.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
PAYMENT COPY.exe
Resource
win10v2004-20230915-en
General
-
Target
097c5eca7c09b7643f8216494fb58fc26c461d7d09dae312a3b491e49d937e1f
-
Size
574KB
-
MD5
58083d43e36dac0695018d67696104d8
-
SHA1
b154451d6278db75f3b8b6e8cf3b444d7cdf4a89
-
SHA256
097c5eca7c09b7643f8216494fb58fc26c461d7d09dae312a3b491e49d937e1f
-
SHA512
0391a298db7f04a037458cd11447ad403ada837d3d529532efa590a438675058d3d7ef423bc4b5261dd826adbc4732d555688aea37ff83391343afdb5e240ea2
-
SSDEEP
12288:18ZdQHSoDL2dVit0gbl1WCw4K6t+RN6YDdnjWMyFet5tjbO5W:1OcSS2dItdbl1FK6QRfDkytF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PAYMENT COPY.exe
Files
-
097c5eca7c09b7643f8216494fb58fc26c461d7d09dae312a3b491e49d937e1f.zip
-
PAYMENT COPY.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 610KB - Virtual size: 609KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ