Static task
static1
Behavioral task
behavioral1
Sample
Payment schedule.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Payment schedule.exe
Resource
win10v2004-20230915-en
General
-
Target
Payment schedule.exe
-
Size
622KB
-
MD5
80bda8af60ca7bf5f8710c947b680f3e
-
SHA1
6fb87d4f46459aa9e87601e600ba756bfa029703
-
SHA256
8949a8a320323f313ed3f2aa71b5025b80f4ca7fa7b709a71c86bb392060f25b
-
SHA512
c156d8f3d640cb63d036eb634089d6dbf28359236405359c5877d3053e8e307782c550f4898bbdfe5ed1b8f4b7caac2ac4f251fd1674197e6c12bc99713f84c3
-
SSDEEP
12288:hOXUPNPW5NrTzsxFmMpxxFoO0EWO7gycgEzl:uUPReNrvsxFfpxrLj7gh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Payment schedule.exe
Files
-
Payment schedule.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ