Static task
static1
Behavioral task
behavioral1
Sample
Payment advice.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Payment advice.exe
Resource
win10v2004-20240412-en
General
-
Target
Payment advice.rar
-
Size
630KB
-
MD5
323112c6f4ace7b2077caf1e795a3eca
-
SHA1
6d06a24fc5a59362a8e3a7de0e1ea25fe3d349de
-
SHA256
5702bb1b965e8221c4a7ed02e67095f8b60af404fa72f0693da6affda8a9111a
-
SHA512
2a2486937b546c20d8d4aa06af3558582d21078c1560e25761e47d6271421b549d1ea07f4bb02f5e99e5338bb9c34057886d5760d684471ec2929edc25bd794a
-
SSDEEP
12288:ZzywtETm5KwxW2MdMRhYmjaa/m20aVmK/QGYa/qtswpKC6/VgcVs:vtzsJdMXYmOa/m20k33/Wraac6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Payment advice.exe
Files
-
Payment advice.rar.rar
-
Payment advice.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 638KB - Virtual size: 638KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ