Static task
static1
Behavioral task
behavioral1
Sample
Bank Slip.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Bank Slip.exe
Resource
win10v2004-20231023-en
General
-
Target
7775ec1d72644c49308a414b30509f2b6214b99e440fa5e92600478b3fa3e784
-
Size
442KB
-
MD5
dfcf78892a5b3b02210b067cb812a326
-
SHA1
4402154de4303893f2564f4de809f4d166f8718a
-
SHA256
7775ec1d72644c49308a414b30509f2b6214b99e440fa5e92600478b3fa3e784
-
SHA512
176175e489a1583264eb9440d47b00ccc48615b38aafc50dc815cd31616147b02bbcedf329050e9b088593eed170155018aa715e80f8463b482567d7ba37d1f2
-
SSDEEP
12288:VTlyWuGmR9WsWT0iJaD6QwynzzvNojaCXtUXgwFn8n:zyN7PWBoiJaVpVA4gwq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Bank Slip.exe
Files
-
7775ec1d72644c49308a414b30509f2b6214b99e440fa5e92600478b3fa3e784.zip
-
Bank Slip.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 448KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ