Static task
static1
Behavioral task
behavioral1
Sample
Payment Advice 901749-850174-508466-PDF.7z
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
Payment Advice 901749-850174-508466-PDF.7z
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Payment Advice 901749-850174-508466-PDF.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Payment Advice 901749-850174-508466-PDF.exe
Resource
win10v2004-20240508-en
General
-
Target
Payment Advice 901749-850174-508466-PDF.txz
-
Size
650KB
-
MD5
6322d9eca1f5c33a0753957da44b7b3d
-
SHA1
8310289185d381ad5fe5c207e704d1729d87d28a
-
SHA256
1304a9cc5fb81053cfdc872ca058b63931a47eabdc120521f4ac3bceb8f88088
-
SHA512
f75eaf6981f454436710204468ca3b588a331f8a881201d7be54541f6043dfa63d68ea63160dc502f12958881f8e81839bb1abd188e928f0038611a92ff3120c
-
SSDEEP
12288:HUEv4VEkXPo/Jj3+kV5YIuyZEHBOBf777ise6cSsNpRkNjVN1fK6u5J:HUxvo/x3NmyaHB2X7i56c5i7fKrJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Payment Advice 901749-850174-508466-PDF.exe
Files
-
Payment Advice 901749-850174-508466-PDF.txz.7z
-
Payment Advice 901749-850174-508466-PDF.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ