20b11d44b4ee8320455e755b40f263aa548750ed7c02e1a6f03337f61e25b2a8

General

Target
20b11d44b4ee8320455e755b40f263aa548750ed7c02e1a6f03337f61e25b2a8
Size 833KB
Sample250212-jfydqsslhs
SHA256 20b11d44b4ee8320455e755b40f263aa548750ed7c02e1a6f03337f61e25b2a8
MD5 16652e2d769991aa0a99adc429c1e5a2
SHA1 2006c46a828c6f699fbe4012980bb957dc2b076d
SHA512 3f7c918cc60f6f8a251ce0bd749e8a09dacfe0fffceb8656d0f1fc1a0b1a94843efe44f94ae3bc31ff7b3a4e0a02fa8c70c1c0c858c2ac2aa37233d51ec0a6ab
SSDEEP 24576:lm9vvaLdQpiGhd4fqerCDFRFSMUeYw8S9K33:lm9vvIQptperOFDfUe98/n
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Payment Notification.exe

File Explorer

20b11d44b4ee8320455e755b40f263aa548750ed7c02e1a6f03337f61e25b2a8

.cab 833KB
Payment Notification.exe

.exe 985KB

20b11d44b4ee8320455e755b40f263aa548750ed7c02e1a6f03337f61e25b2a8

SHA256 20b11d44b4ee8320455e755b40f263aa548750ed7c02e1a6f03337f61e25b2a8
MD5 16652e2d769991aa0a99adc429c1e5a2
SHA1 2006c46a828c6f699fbe4012980bb957dc2b076d
SHA512 3f7c918cc60f6f8a251ce0bd749e8a09dacfe0fffceb8656d0f1fc1a0b1a94843efe44f94ae3bc31ff7b3a4e0a02fa8c70c1c0c858c2ac2aa37233d51ec0a6ab
SSDEEP 24576:lm9vvaLdQpiGhd4fqerCDFRFSMUeYw8S9K33:lm9vvIQptperOFDfUe98/n
MD5 SHA1 SHA512 SSDEEP

Payment Notification.exe

IMPHASH 00be6e6c4f9e287672c8301b72bdabf3
SHA256 14796fa693fd9ad320db492f9e7697f89a3c999be8edf43756189eee0cabb558
MD5 e74f81db191d9908262caa4969915996
SHA1 5f437e6b4af5bda95c61fb04192743f97d4f2b30
SHA512 709c9e89e86e7d2f8f77ee120993f62360f9f950bbe8604d8fa6d0ebffc727d86a248949e7109997066881d2fed549efc039d990419cb02c9e85e35e7f30226b
SSDEEP 24576:bNA3R5drX9jd944+qehoDvRSSMgsi5seYn8S9KRP:G59J9tehAvcflze4851
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

120665

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb

kernel32

GetLastError SetLastError GetCurrentProcess DeviceIoControl SetFileTime CloseHandle CreateDirectoryW RemoveDirectoryW CreateFileW DeleteFileW CreateHardLinkW GetShortPathNameW GetLongPathNameW MoveFileW GetFileType GetStdHandle WriteFile ReadFile FlushFileBuffers SetEndOfFile SetFilePointer SetFileAttributesW GetFileAttributesW FindClose FindFirstFileW FindNextFileW GetVersionExW GetCurrentDirectoryW GetFullPathNameW FoldStringW GetModuleFileNameW GetModuleHandleW FindResourceW FreeLibrary GetProcAddress GetCurrentProcessId ExitProcess SetThreadExecutionState Sleep LoadLibraryW GetSystemDirectoryW CompareStringW AllocConsole FreeConsole AttachConsole WriteConsoleW GetProcessAffinityMask CreateThread SetThreadPriority InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateEventW CreateSemaphoreW GetSystemTime SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime SystemTimeToFileTime FileTimeToLocalFileTime LocalFileTimeToFileTime FileTimeToSystemTime GetCPInfo IsDBCSLeadByte MultiByteToWideChar WideCharToMultiByte GlobalAlloc GetTickCount LockResource GlobalLock GlobalUnlock GlobalFree LoadResource SizeofResource SetCurrentDirectoryW GetExitCodeProcess GetLocalTime MapViewOfFile UnmapViewOfFile CreateFileMappingW OpenFileMappingW GetCommandLineW SetEnvironmentVariableW ExpandEnvironmentStringsW GetTempPathW MoveFileExW GetLocaleInfoW GetTimeFormatW GetDateFormatW GetNumberFormatW SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize SetStdHandle GetProcessHeap RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TerminateProcess RtlUnwind EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW QueryPerformanceFrequency GetModuleHandleExW GetModuleFileNameA GetACP HeapFree HeapAlloc HeapReAlloc GetStringTypeW LCMapStringW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW DecodePointer

gdiplus

GdiplusShutdown GdiplusStartup GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipDisposeImage GdipCloneImage GdipFree GdipAlloc

Sharing

General

Malware Config

Signatures

File Explorer

20b11d44b4ee8320455e755b40f263aa548750ed7c02e1a6f03337f61e25b2a8

Payment Notification.exe

kernel32

gdiplus

generic