kaav.pdb
Static task
static1
Behavioral task
behavioral1
Sample
@國內DEBIT帳單[中文本幣]-OI(K)_20240612161821 - BL NOSZKEE24060420F-A.scr.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
@國內DEBIT帳單[中文本幣]-OI(K)_20240612161821 - BL NOSZKEE24060420F-A.scr.exe
Resource
win10v2004-20240508-en
General
-
Target
@國內DEBIT帳單[中文本幣]-OI(K)_20240612161821 - BL NOSZKEE24060420F-A.scr.exe
-
Size
493KB
-
MD5
79a3854fb0bddb26135bc0311f21ed76
-
SHA1
8c352e1807c00bd32c7cde3e0ece9bf33b6db927
-
SHA256
bad53d6e667f724563d9b42141bbcf279299b67c03db091c325e8e5597474f76
-
SHA512
2386b686b351f793d86db09e4a9a9bf39ffd0c7ec74ecc7e36ad78beeb092c97d0213dc628332df73856527768d95f507bc19e4b195bd06eec5305ac06f8d896
-
SSDEEP
12288:O8yCK2xrOodLv2npXmznJHTWFB40fJH9TaCf4wrDjbj:XyC5UpXmzJWLt9Ta64Ofb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource @國內DEBIT帳單[中文本幣]-OI(K)_20240612161821 - BL NOSZKEE24060420F-A.scr.exe
Files
-
@國內DEBIT帳單[中文本幣]-OI(K)_20240612161821 - BL NOSZKEE24060420F-A.scr.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 490KB - Virtual size: 490KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ