PAYMENT_COPY[.]zip

General

Target
PAYMENT_COPY.zip
Size 792KB
Sample261022-beh9esha75
SHA256 9ea29e0416ddf73152e89c6c0af0af1cd300c3f1a0d88eee116efde71a99db9c
MD5 5b06dbe2c42c1c3df42c75a2f3d61441
SHA1 c3c4460a703685c836255d3fcd54235670368f8f
SHA512 7bb8b1d64a4a98b5178cc9b8773642af0792299e27033dce8c18bf27157b4c1dcd6b2226a845f8a7150b2b7518a4175956fe81899f50a67729db31b60d59f176
SSDEEP 12288:Aa9vT2va56XLcYXDp/AF0I3PSu4e2iQWXsta3eVXqk6BG40q0wgGfyle+:j6FLcY1/A3PSugm3gMVae+
TLSH
T1190523C30B4C9BD674CF74C914A2237A3994AB9C18B3BFDC8D88929B07295BF54CE558
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PAYMENT COPY.exe

File Explorer

PAYMENT_COPY.zip

.zip 792KB
PAYMENT COPY.exe

.exe 973KB

PAYMENT_COPY.zip

SHA256 9ea29e0416ddf73152e89c6c0af0af1cd300c3f1a0d88eee116efde71a99db9c
MD5 5b06dbe2c42c1c3df42c75a2f3d61441
SHA1 c3c4460a703685c836255d3fcd54235670368f8f
SHA512 7bb8b1d64a4a98b5178cc9b8773642af0792299e27033dce8c18bf27157b4c1dcd6b2226a845f8a7150b2b7518a4175956fe81899f50a67729db31b60d59f176
SSDEEP 12288:Aa9vT2va56XLcYXDp/AF0I3PSu4e2iQWXsta3eVXqk6BG40q0wgGfyle+:j6FLcY1/A3PSugm3gMVae+
TLSH
T1190523C30B4C9BD674CF74C914A2237A3994AB9C18B3BFDC8D88929B07295BF54CE558
MD5 SHA1 SHA512 SSDEEP TLSH

PAYMENT COPY.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 617e47d126409219359c49e4f9cbabb7bd488055f954a4777030ff5c49541736
MD5 747234db7f9fec2067e1933a32ad63c6
SHA1 ca4918a0a8436a44d2d9c027be5ceed5f19b1d63
SHA512 d1db4b1b727a05f55cd7dc2c1dbe43d9109f7cb2dfb758e772400a7fc97007b2809a3f71c392dce332bedeead0f51567b656ec0ce493d54186b65bac5f8ceac1
SSDEEP 12288:NZIJvTegZNi4WYXtciXnppA30Ix1yu4A26QWX8TAJSMpZ2WhuEeEGsMsGsM2zV:oJjFftci5pOx1yuSwJfpZ2Wpt79
TLSH
T16725BE442658DA07C4BA63B4C961F3F433A92E9AE821D3074ED7BEDB7931B40491639F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1001670

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

PAYMENT_COPY.zip

PAYMENT COPY.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

PAYMENT_COPY.zip

PAYMENT COPY.exe

mscoree

dotnet