Static task
static1
Behavioral task
behavioral1
Sample
PAYMENT-PO6331-105.exe
Resource
win7-20240903-en
General
-
Target
592e11609907e053f556ffcfc9a875ec74a8715c891689d318015ec32afc9815
-
Size
681KB
-
MD5
2b43dd232c53b9dbcdcc089fea000a64
-
SHA1
d30f5e1d504680d30278a19fcdef5e2ca4706c8f
-
SHA256
592e11609907e053f556ffcfc9a875ec74a8715c891689d318015ec32afc9815
-
SHA512
2e75a0aca5e3a8366312f215c96b28d4f0ac095a6e45429903c419e655d14d46a976f05b356ac88ee42608bd74e6e35d3d978ee6a64a8ac2fe9017c2edd7b31c
-
SSDEEP
12288:rzZ4mBFtjygdFwWE3en/5K2BQuqeDSqVL6FBxjd/eo4+pw4HjF86f0G7d9:rzZT6qFwWE3EK8q6STFvXpwQGlev
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/PAYMENT-PO6331-105.exe
Files
-
592e11609907e053f556ffcfc9a875ec74a8715c891689d318015ec32afc9815.zip
Password: infected
-
357f944a0e77a47c8a686bd080a8e6076b460016685e68277a46d07392f68c15.iso
-
out.iso.iso
-
PAYMENT-PO6331-105.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 850KB - Virtual size: 850KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ