iLyT.pdb
Static task
static1
Behavioral task
behavioral1
Sample
CREDIT NOTE.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CREDIT NOTE.exe
Resource
win10v2004-20240412-en
General
-
Target
6f9403f911aa53548b32549569d2bb20.bin
-
Size
656KB
-
MD5
56077fc6e01c73b4562073468004c847
-
SHA1
56d06f2d170d02796815b15002b2f8b155e5bb74
-
SHA256
bfc44834bf0f38982097de6b81967c4c4deb75047c024d32d184a2af4b743cfd
-
SHA512
00a8df95b1324a04c9d0eb741498b721378ececa2be3e9ab7570415e77d23220c2640ef3fc252f850126bc14c38b13ca5dfb2c4041db1a932612313cc70b89ea
-
SSDEEP
12288:jcGj7cC4s/9rvWIkymbGU7SHLDyNlKjExRhkjj5LQYalLS:jcGj7l9lrvwyaGU7KDyq4xfaVQYCO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack002/CREDIT NOTE.exe
Files
-
6f9403f911aa53548b32549569d2bb20.bin.zip
Password: infected
-
7376bac0d01a46a7a0b44df6c072684308b0c81e2822259cbad8840b48f23b12.7z.7z
Password: infected
-
CREDIT NOTE.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 653KB - Virtual size: 652KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ