Static task
static1
Behavioral task
behavioral1
Sample
Remittance slip 060223.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Remittance slip 060223.exe
Resource
win10v2004-20231020-en
General
-
Target
Remittance slip 060223.exe
-
Size
16KB
-
MD5
78225846d3b2cb404f4dbfe6e37a414e
-
SHA1
470931b7de8fed1c1ffa63cc5469bdd385d36268
-
SHA256
f0e50fae6183fabd2514fcb7524905bd8a23665d6785c963bad6b0ff3c024d0b
-
SHA512
78b76e5f29a5a45536c846be2bdd7132f1079e910d5c6b46968a2c7c295a8c71e7d8670b9f61150a303dbdd05e1c2ad2466b854c491aca8c3e9bc13e32030e96
-
SSDEEP
384:BztL+6iWZiTHnMnjEKugPVE70k+qY/sgKwQOp:aW0MA3WpRt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Remittance slip 060223.exe
Files
-
Remittance slip 060223.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ