Static task
static1
Behavioral task
behavioral1
Sample
Payment Advice.scr
Resource
win7-20240903-en
General
-
Target
d0f96b0b6183e3187efd5bc7e3c301d486a4f5c04265d95198ce32f1537e3f72.unknown
-
Size
659KB
-
MD5
6afb88566ca38e9dd868bda2422b435b
-
SHA1
b5e0a33f0363115b24512350263d99eb8af775eb
-
SHA256
d0f96b0b6183e3187efd5bc7e3c301d486a4f5c04265d95198ce32f1537e3f72
-
SHA512
ec2aa3d98b26110974ab849196c23cade2acb96afc1f77394d3ac009e93f5ddfc5d11f857595e039f0caeb3db12212dab926e4672e8873a712438ede04934480
-
SSDEEP
12288:jOjsJrm2DORelTAeZjqjhazCtH42QWkn5IxQMj7RYLgXeevG3j8bQb:jWsJrm2DO0TvqH42ZLuMj7GEXze3UI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Payment Advice.scr
Files
-
d0f96b0b6183e3187efd5bc7e3c301d486a4f5c04265d95198ce32f1537e3f72.unknown.tar
-
Payment Advice.scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 655KB - Virtual size: 654KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ