Static task
static1
Behavioral task
behavioral1
Sample
Remittance slip 060223.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Remittance slip 060223.exe
Resource
win10v2004-20230915-en
General
-
Target
Remittance slip 060223.exe
-
Size
293KB
-
MD5
b88856121960fb92be6942015f55ce7c
-
SHA1
b4c987ae0045332070e6650d73dca8dc6bc929f2
-
SHA256
7f2fe5629a1ee29108e48297ad91a499c84e95d54add661a8fc8ff8f112a0243
-
SHA512
f74bd8f77c5374fce46c237991daf4af48f099b3c742b5323a075d2015a9b0b0c727eddf4fea84449fc0257b82e930d8448d7635f8df2087be83f0944541cc40
-
SSDEEP
3072:lEn+tdvrlEYKlbT35DLh1H439L4/8o6W5jP7Ubz4:lE0NZEY+fpDLhd43WmSjPAv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Remittance slip 060223.exe
Files
-
Remittance slip 060223.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ