Static task
static1
Behavioral task
behavioral1
Sample
ProofOfPayment 11 June 2024.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ProofOfPayment 11 June 2024.exe
Resource
win10v2004-20240611-en
General
-
Target
4be4e18fd9c34cf9145c6bb1154a91850e500fb989e28db2597dad8aac36023e
-
Size
1.2MB
-
MD5
4706fee53a47248ce861cadaf87799fa
-
SHA1
c43ee7c7c37a6af99a05c3741b65f7fce39052e2
-
SHA256
4be4e18fd9c34cf9145c6bb1154a91850e500fb989e28db2597dad8aac36023e
-
SHA512
2e5b8202dee601f4abbbffa15781c9ef26da7ea07024915e0198ee40ce2ea7411a8a52ddee43842f641dd33f07682ecf6b267be6e43e8cee7ae7744f64d81245
-
SSDEEP
384:smGMdhBlbdkt3MNIdLEX6vGTTmPj3UQ0fnFfDhF:smGynbeDdQKuTej33+H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/ProofOfPayment 11 June 2024.exe
Files
-
4be4e18fd9c34cf9145c6bb1154a91850e500fb989e28db2597dad8aac36023e.iso
-
out.iso.iso
-
ProofOfPayment 11 June 2024.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ