Static task
static1
Behavioral task
behavioral1
Sample
Payment Advice (4).exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Payment Advice (4).exe
Resource
win10v2004-20230915-en
General
-
Target
e64af6bda57151b3304693b544f08ddf338b26aa5f70a462dff92a015c457a26
-
Size
607KB
-
MD5
0e5cac433e15671f08de2f19714f2242
-
SHA1
b9b81a54cd9706b42b53ddf2e142304cb640cabb
-
SHA256
e64af6bda57151b3304693b544f08ddf338b26aa5f70a462dff92a015c457a26
-
SHA512
98513b5b24446ba9e2d2114cd33761635ea54a1e259babd32b21a3257f180066ea8ccdaf88209428c7eb022cc9da92c8be122d79cf4f0ffe97a24f12f5b44ae1
-
SSDEEP
12288:8OJNAdnmZEQtNUZaXqe5gzRHZcmerZgu+Xiw/J+09e30lRwTjAY62:8uNoEkaXQzxW/rZgXXiQ4bZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Payment Advice (4).exe
Files
-
e64af6bda57151b3304693b544f08ddf338b26aa5f70a462dff92a015c457a26.zip
-
Payment Advice (4).exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 644KB - Virtual size: 641KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ