ItmF.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PAYMENT INFO.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
PAYMENT INFO.exe
Resource
win10v2004-20240802-en
General
-
Target
PAYMENT INFO.exe
-
Size
774KB
-
MD5
6dccb1dd8e7b7fe9d9f138caaea7f420
-
SHA1
038fec3f89b09fad5e74dc978b00635f39da3bd0
-
SHA256
36072f64891875212e9f45cc11d64d1bfdbe9a8caa55cdb1f488d7ac1c232074
-
SHA512
01e81b6609ebacf1234ec22206c03b67dd7e0e318ab27f6dbb84bdf0ccf6514e45563145fc6b893e041af42dcc167e9caaf388d34d5a5ded7f6cb7062db173b3
-
SSDEEP
12288:dVf55k2851Elq/61UJp2Xen07Ow4BuYwOcFB7YTcYeQ8dRrrllE3Oix4r:J5x5lUJgXk07x4tiUcBFHrFEi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PAYMENT INFO.exe
Files
-
PAYMENT INFO.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 772KB - Virtual size: 772KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ