Static task
static1
Behavioral task
behavioral1
Sample
Receipt#502.exe
Resource
win7-20241010-en
General
-
Target
d1c305c0f96cd5e726c72fa77af15bc5e4ef1856301de35822f0d94b2aa21697.zip
-
Size
458KB
-
MD5
c8499d7b22943beeef4e33d1600cdcd5
-
SHA1
b1b7d29afeb86710a55ba2193ef47897c7172863
-
SHA256
d1c305c0f96cd5e726c72fa77af15bc5e4ef1856301de35822f0d94b2aa21697
-
SHA512
cbfa6dd3a42f2aff67fec0a37903710e656e201373a887d0795cac247f04529868b194a42f3156b17de63c77ed84cc3d789164fd159899a5279af5f01498b583
-
SSDEEP
6144:szg+CUV9fwAsQYOyzVpIIWP6QXeD1zIgRMbiPotn3f3FmgWHbF/WafrZumCg7IoD:WXVGAs3XzPIIoHuJztgl3f32b8afNx9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Receipt#502.exe
Files
-
d1c305c0f96cd5e726c72fa77af15bc5e4ef1856301de35822f0d94b2aa21697.zip.zip
Password: infected
-
1a77bfd73a71f3e13a0782118411982460e0a2656a329392f194adcddb7bb85c.img.iso
-
Receipt#502.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 511KB - Virtual size: 511KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ