Static task
static1
General
-
Target
Payment Advice.exe
-
Size
908KB
-
MD5
8f3721394ec357f460058939e98399c2
-
SHA1
c5a1337f96b4d7d390ab09a7c61aa2b0e800d7e6
-
SHA256
209af74332ca53a98e5e9b526bfe66ebd184f991483f4268e3054210114e3668
-
SHA512
81fb6d5ec794f2b64297ded672f44e4edabf94ea4e437d4924812541ea012dd140726f74e7ef1d268cad7a7106660016776a9d6f7e752883554ccc1e04ccfce6
-
SSDEEP
12288:aOb1TwQwV6BRiZDqStqrAiqWoI4QHJCgb1cUFv+vn1N5pZ7hw6JvbxC+Z6F4XCxj:an5Ui6J3Cgbu35Dlw6dldZjCEr93I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Payment Advice.exe
Files
-
Payment Advice.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 906KB - Virtual size: 905KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ