Static task
static1
Behavioral task
behavioral1
Sample
overdue payment.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
overdue payment.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.861f1511b4464e0c3fd64db843fe357894204b1427014232c6c7434b02947811.rar
-
Size
575KB
-
MD5
867a9334691e4a998f4159c46fe8d42d
-
SHA1
9c36d376c7e82416c0fb6be3656745beaf5c4bff
-
SHA256
861f1511b4464e0c3fd64db843fe357894204b1427014232c6c7434b02947811
-
SHA512
bc35dea385b77b58012d5bb03112b3c8de7451119636b305f7cf593185dbe504905cb4d1a5bcbefb1f21472ebc129e3ba3e30ac65d0d6f37e3b2abc49811af9f
-
SSDEEP
12288:niE54BT9A3alnw18LI34okqNvoAO+rWbPSVC10yG4sUbBecY/:i4mT9AKmJIodNnOCxryG4VE/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/overdue payment.exe
Files
-
NEAS.861f1511b4464e0c3fd64db843fe357894204b1427014232c6c7434b02947811.rar.rar
-
overdue payment.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 606KB - Virtual size: 605KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ