Static task
static1
Behavioral task
behavioral1
Sample
DOCUMENTS OF OWNERSHIP AND PAYMENT REQUIREMENTS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
DOCUMENTS OF OWNERSHIP AND PAYMENT REQUIREMENTS.exe
Resource
win10v2004-20240412-en
General
-
Target
c66e9ddda9b6199e8b5987f1f6cc617b.bin
-
Size
589KB
-
MD5
e548b2e01efcb799f2254a38f8b6929a
-
SHA1
2cf533ef16009116589f66d8e62396e613ed5ad6
-
SHA256
7c5f044297c41656c1ac7eff5257862b6cb34f9709372ae3aaa28e02b4d1d606
-
SHA512
e22e2ff17bd6e25a7b12c199bc67c2935bf700e29f7b4c4ee1d2c415433ad11e3e44ec5c9564ba21b2fcae240cc7a3e9e21641e20cec385c8265148029f86820
-
SSDEEP
12288:zWNyvi2EgI37rT9JFS6xT5OAO7yhZTmbVQzNdqZ8QAfy3nAcPKKm:uSi2EgI33BH1HO+hZkVcuj3TPe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/DOCUMENTS OF OWNERSHIP AND PAYMENT REQUIREMENTS.exe
Files
-
c66e9ddda9b6199e8b5987f1f6cc617b.bin.zip
Password: infected
-
bf59eeee70c668fdf6fbf586811ef7d432a656060dedbf02ba705a6dff9d83bb.zip.zip
Password: infected
-
DOCUMENTS OF OWNERSHIP AND PAYMENT REQUIREMENTS.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 804KB - Virtual size: 803KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ