Static task
static1
Behavioral task
behavioral1
Sample
2 months salary receipt.exe
Resource
win7-20241010-en
General
-
Target
e775d1def135834d0c6929b007131891f07709f87dc94b761d779205aba86c20
-
Size
244KB
-
MD5
7d09037ee14ddd7d42c9cab87b01c9bd
-
SHA1
f818f411dea2e14e7761467c9b47052beeb6d670
-
SHA256
e775d1def135834d0c6929b007131891f07709f87dc94b761d779205aba86c20
-
SHA512
e5df513b298954af4531dc20f1523bd9a012f99bfa03b43ab43a27af0dfa9711c7cffc499adc287ab0d4e378f9af567520b8520cccc57cefc4170d5a9a47e6f4
-
SSDEEP
6144:0n99W00eQspck9Dcu/4XiBEp31TCmmQ68XL3+jLTVnKLiL7Gp3XF9RS:EQspckBcu/4X0qFCbQ68XbeEiGp3XA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/2 months salary receipt.exe
Files
-
e775d1def135834d0c6929b007131891f07709f87dc94b761d779205aba86c20.zip
Password: infected
-
70d4fad8811ab2835f64e27d956eaba0a3069667c176a5076ddfbaa425077e1e.iso
-
out.iso.iso
-
2 months salary receipt.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 299KB - Virtual size: 298KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ