Static task
static1
Behavioral task
behavioral1
Sample
PAYMENT.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
PAYMENT.exe
Resource
win10v2004-20240419-en
General
-
Target
de84a8494651f4bb2c06ba0aa94d0b239f0d8727a3050a907391dfd589c36952.gz
-
Size
1.4MB
-
MD5
0e8822f1e22de0c15830945bcb3ede1a
-
SHA1
bccb986b8308f11ca5d9d18387b3158488e0a0bb
-
SHA256
de84a8494651f4bb2c06ba0aa94d0b239f0d8727a3050a907391dfd589c36952
-
SHA512
159be071815f3b4abc8defe7cf236bcc12d74a9ecc10a85dd07b014f1b5421a0ccbccb2577b8bbe45481e8c85b038ec4d0ac018f34314730bfa81fa41a531fb2
-
SSDEEP
12288:iZ4sek55RW2s5LyIG46wc9ebKIAsjLWFqQZ7OJ0iTrsqGyPn06OTghDbzZjdLahN:G4hk5e2qriIbVfLsqQRPoYDyPnvDbva3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/PAYMENT.exe
Files
-
de84a8494651f4bb2c06ba0aa94d0b239f0d8727a3050a907391dfd589c36952.gz.gz
-
sample.tar
-
PAYMENT.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 667KB - Virtual size: 667KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ