Static task
static1
Behavioral task
behavioral1
Sample
Receipt.exe
Resource
win7-20240708-en
General
-
Target
0e9ea036cc3d12ebf13246ed845af7b0N.zip
-
Size
1.8MB
-
MD5
0e9ea036cc3d12ebf13246ed845af7b0
-
SHA1
1ca4f29e7730f4a58f5024b550e25777c185837e
-
SHA256
0011c648908367121eaa246fdd1dc0b4464aecbb48ecfe303e90625fcf6690d3
-
SHA512
e14354ce87e3b08e0daeb5efc9717e9e528484e304235c49805ac32a21c71611c489cbd4cffc4538de5a77bc3007874b35f62de142a50d465119b46b50101007
-
SSDEEP
49152:QpBkZr4lMy4rb8k8oRlw71f650JAK8J1creWGw:QHIr4u1MFoRlw71f65KtO1crebw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Receipt.exe
Files
-
0e9ea036cc3d12ebf13246ed845af7b0N.zip.zip
Password: infected
-
Receipt.img.iso
Password: infected
-
Receipt.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ