kIzY.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Zahlungs-Nr.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Zahlungs-Nr.exe
Resource
win10v2004-20240802-en
General
-
Target
Zahlungs-Nr.tgz
-
Size
1.6MB
-
MD5
b384d981245abf8452241f064ac4df46
-
SHA1
0b35915e584f42c2ee5358b4fce49e28e52f1dee
-
SHA256
4319cfb4dc7267be96b5327458265d3f63e61cd16a73cb115d8f312985957c61
-
SHA512
5eb12ae1698dbcbf9e988d54e0d291416ce53ba411adeed43426f5a966e60059cdae70e12e64dc92fdbfd57df49de3fee03bb838a6538fa21cc14f122f44a9df
-
SSDEEP
12288:kLG9v8aZFn5mzk/9N0/cItPirQXilGpCaDzF4nqF9Hh2yno:F0aZHNIT0mCOynqF9syo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Zahlungs-Nr.exe
Files
-
Zahlungs-Nr.tgz.gz
-
sample.tar
-
Zahlungs-Nr.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 687KB - Virtual size: 686KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ