Static task
static1
Behavioral task
behavioral1
Sample
ada5754083cc4ae90965d052f597238c41d7cd5e07564979e57d0dd5e0febc73.rar
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
ada5754083cc4ae90965d052f597238c41d7cd5e07564979e57d0dd5e0febc73.rar
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
Confirmal Receipt.exe
Resource
win7-20231023-en
General
-
Target
ada5754083cc4ae90965d052f597238c41d7cd5e07564979e57d0dd5e0febc73
-
Size
656KB
-
MD5
1ed4c438fe8cb35a0fff981a2a5b567a
-
SHA1
3cbc57464c7d90e8bf6ce4f42b1e77b2f73fc0cc
-
SHA256
ada5754083cc4ae90965d052f597238c41d7cd5e07564979e57d0dd5e0febc73
-
SHA512
be0e50eaf04396a55dc155f11295c18bd5a4906476e2a1384cc8afb846094f3b6cb3b13ea9d39883e3346e16c87c61d92a83762d94dfdba8924e0c9e733c5919
-
SSDEEP
12288:3u5ViLB83MvH0ZzshuLkRAU75bWLJIe8+uF2vMFNDpKjuNFNS3ZFgYNBa:32XMvH018d7s8+A2cKjuHNS3ZW7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Confirmal Receipt.exe
Files
-
ada5754083cc4ae90965d052f597238c41d7cd5e07564979e57d0dd5e0febc73.rar .ps1 polyglot
-
Confirmal Receipt.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 814KB - Virtual size: 814KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ