Static task
static1
Behavioral task
behavioral1
Sample
Overdue Payment.exe
Resource
win7-20240611-en
General
-
Target
Overdue Payment.tgz
-
Size
1.4MB
-
MD5
b24f5599db201aa984406f6000df7d71
-
SHA1
f5c65c0bfc4f745c0e1c54fd4ac977f32dee4bb8
-
SHA256
51ceadb3d89b031f03008a61b6f1bba2a664383bfc8fd1e404a50232c6a8b057
-
SHA512
6983d895daa590b56a23354333568acf3bec2a3b080d861d383b3b860dce88442bfdec641ac7a2da304ec0798d118e975a07a1cfd31673c7031a6c35d0ef6da0
-
SSDEEP
12288:cu1BIngElQ3kEyvyJ/Wdaok37Vl0txCEO/wt26N2lf0RZ38I8wvn+a67JquL8:cCpElQ3oc/xn/ExCHMaGRT8wvnwAc8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Overdue Payment.exe
Files
-
Overdue Payment.tgz.gz
-
sample.tar
-
Overdue Payment.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 728KB - Virtual size: 727KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ