Static task
static1
Behavioral task
behavioral1
Sample
Payment transfer receipt.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Payment transfer receipt.exe
Resource
win10v2004-20231130-en
General
-
Target
Payment transfer receipt.exe
-
Size
707KB
-
MD5
6b4f1a3be0235913f4d97c0868de95cf
-
SHA1
72b3187f1a016d140ff560ce5733350331970e43
-
SHA256
8a6ce4540ab156fcd0caa34a839513276f8f6a2c14e3c3b173c82639091271c0
-
SHA512
857bdcb46d49fdb2cf6ec404b2322ec411f74cdd4bea76c83f1598bada5434b17dcb37bcb2551c253ff74b0bb130332e16ecc17dad1d8bf8acf3b9737dba20a4
-
SSDEEP
6144:pP3RWHKuZ5Wll1+VfGtAhAaZSRf1JfsysD9dJnB8QFlaqVnnyZKo:NhkZ5M+VfG6Qf1xDsxdRF7q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Payment transfer receipt.exe
Files
-
Payment transfer receipt.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 415KB - Virtual size: 414KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ