Static task
static1
Behavioral task
behavioral1
Sample
Bank Payment Statement case no. 7929878202.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Bank Payment Statement case no. 7929878202.exe
Resource
win10v2004-20240802-en
General
-
Target
10092024170310092024BankPaymentStatementcaseno.7929878202.gz
-
Size
825KB
-
MD5
d4eaca7cc140cd9fced876d9c506dc92
-
SHA1
b41d896cd520613cd4e5b5371e5ba700755d46a8
-
SHA256
43c4961a041e4f4a57d97cfead7dbec29949c3da99cf921504528752602032ff
-
SHA512
8cecba9df368aa41ef8db43640510efe8d20b92913759d5d8b4f50485629cbf55fb49bdc86010214916b0b6b9b5e2f1fd6345e5e484dc47065d0696820c33d2b
-
SSDEEP
24576:eP6PhoGBPKFLg9e4+DMWWgRjPKHOyDKDv:LbB7e3TWgR0GDv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Bank Payment Statement case no. 7929878202.exe
Files
-
10092024170310092024BankPaymentStatementcaseno.7929878202.gz.gz
-
Bank Payment Statement case no. 7929878202.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ