Static task
static1
Behavioral task
behavioral1
Sample
Attached_Payroll_List.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Attached_Payroll_List.exe
Resource
win10v2004-20240802-en
General
-
Target
Attached_Payroll_List.exe_
-
Size
637KB
-
MD5
0ffe2530b9fe03e3cc710467d04453ea
-
SHA1
d437359b8290692b59de3aef6db6e40fec57241b
-
SHA256
6a2f9d4bccf9e91d8cbe39b28de6ea1b2a6283fb4fb640d17c66ce53e851dd8c
-
SHA512
d514537524c446b2a6f1973f1a85079ce9bfeee4193adcc3bb5f493ded209f46df753c473399b8e715226b352c09158c49943201a129a8df70839fc488562384
-
SSDEEP
12288:vVmF8Bil3GVQJ8yWXTU4ymUNrRfXQ9LPkZw7TuscS:vVmLl3GuTWXTFCNrR6PewVcS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Attached_Payroll_List.exe_
Files
-
Attached_Payroll_List.exe_.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ