Static task
static1
Behavioral task
behavioral1
Sample
Payment Advice.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Payment Advice.exe
Resource
win10v2004-20231215-en
General
-
Target
90536bf5a449a38fb4abd8fc12c8d2f7bbd47d56b177f3f3dd03ff0abc31aaec
-
Size
647KB
-
MD5
130b1bb92295d88c76cc80e6f4fcb250
-
SHA1
da23731d106d5cc4d0c11f108a10924ea4b4c668
-
SHA256
90536bf5a449a38fb4abd8fc12c8d2f7bbd47d56b177f3f3dd03ff0abc31aaec
-
SHA512
e259de04fe6478ecaaa82988838efc393dc202bfb6974000c5357abac865983ba8549c075ad20111abe7354c63e73ca5a2ae4635f63074ad0f96c354b766cfa7
-
SSDEEP
12288:NnNVnZI1eBrxpdydl6BXP/RwLuktSOZzpwEplRtfmMOQT27Ii90bv/lg5:NNNZI0j40P5wLuSZVwcbo9QTm90b1g5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Payment Advice.exe
Files
-
90536bf5a449a38fb4abd8fc12c8d2f7bbd47d56b177f3f3dd03ff0abc31aaec.zip
-
Payment Advice.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 941KB - Virtual size: 940KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ