Static task
static1
Behavioral task
behavioral1
Sample
ПЛАТЕЖНЫЙ ДОКУМЕНТ.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ПЛАТЕЖНЫЙ ДОКУМЕНТ.exe
Resource
win10v2004-20240226-en
General
-
Target
ПЛАТЕЖНЫЙ ДОКУМЕНТ.exe
-
Size
607KB
-
MD5
ac78d040e052a079b89378bacbb2d5df
-
SHA1
fa96990e3825fc42a17745c3232333e6cff537e2
-
SHA256
9e5762b0fb425b6e9b9e886e9f7c517d02928b3d355755fcf4e28a2ac8ceefa2
-
SHA512
70b7497f4272841f629764763112d0b28e1300cc91f66d044a081f4d47c7487ede52e4cf9fbfc1fa69ce00a9aef0bab005964320c63ae301594967db62f86a8a
-
SSDEEP
12288:fRHI0ZuTGPV811Iyu2Cxt/zfBvpQtRBWXyWe635+urxdoT9:fpZuSPiA1FzHsPO7e0+m6Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ПЛАТЕЖНЫЙ ДОКУМЕНТ.exe
Files
-
ПЛАТЕЖНЫЙ ДОКУМЕНТ.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ