Behavioral task
behavioral1
Sample
invoice copy.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
invoice copy.exe
Resource
win10v2004-20220901-en
General
-
Target
bd5be7d4608d68ce56ecec0ea09260ab908d9bb6ebf8549c3f01134317ce8fb1
-
Size
292KB
-
MD5
725dcc3fbf5be11bab9edcb16397fcb0
-
SHA1
7246dabd92009d2fb2b3511ded00cda3d7b79438
-
SHA256
bd5be7d4608d68ce56ecec0ea09260ab908d9bb6ebf8549c3f01134317ce8fb1
-
SHA512
38712fee5f37c6e92c303e6c667fca9391a84add32ed950d7b1497241b7ab258281a063f0a85240f1ef1aeed6ad6a6702d9dced19c7c19e7505e285b96f95d60
-
SSDEEP
6144:dF7V13XzsbSKahsz+GKMlEgTvC9FfzFGwapT:dFR13XY+Kcszdmg7CPbFGJ
Malware Config
Signatures
Files
-
bd5be7d4608d68ce56ecec0ea09260ab908d9bb6ebf8549c3f01134317ce8fb1.msg
-
invoice copy.zip.zip
-
invoice copy.exe.exe windows x86
cf3ba4e719cba8faf9940695a68041ff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringW
SetThreadPriority
CreateTimerQueue
GetCommState
GetSystemWindowsDirectoryA
GetDateFormatA
GetNumberFormatA
GetProcessHeaps
WriteFile
VerifyVersionInfoW
GetCurrencyFormatW
OutputDebugStringA
LocalShrink
EndUpdateResourceW
SetProcessShutdownParameters
CreateSemaphoreA
IsProcessorFeaturePresent
WritePrivateProfileStructA
SetWaitableTimer
QueryPerformanceFrequency
QueueUserAPC
GetAtomNameA
GetTempFileNameA
CloseHandle
PostQueuedCompletionStatus
CallNamedPipeA
CompareStringA
ContinueDebugEvent
CreateSemaphoreW
LocalAlloc
GetWindowsDirectoryW
Sleep
GetVolumePathNameW
UnhandledExceptionFilter
FileTimeToLocalFileTime
SetThreadIdealProcessor
CreateJobObjectA
GetVersion
SetFilePointer
winspool.drv
ResetPrinterW
shell32
SHGetNewLinkInfoA
ExtractAssociatedIconExW
ExtractAssociatedIconA
SHGetIconOverlayIndexA
SHBrowseForFolderA
SHGetMalloc
user32
OpenClipboard
RemoveMenu
UnregisterDeviceNotification
DefDlgProcW
RegisterShellHookWindow
DdeCreateDataHandle
MonitorFromRect
SendMessageCallbackW
IMPQueryIMEA
CopyImage
LockWindowUpdate
MonitorFromPoint
ExcludeUpdateRgn
DdeCreateStringHandleW
CascadeWindows
GetKeyboardLayoutList
IsClipboardFormatAvailable
GetMenuBarInfo
SendMessageCallbackA
TrackPopupMenuEx
SendDlgItemMessageW
DdeSetQualityOfService
CallMsgFilterA
ShowWindow
CheckDlgButton
UnregisterClassW
DestroyWindow
IsDlgButtonChecked
IntersectRect
FindWindowW
SetWindowWord
EnableScrollBar
AllowSetForegroundWindow
GetClassNameW
SwitchDesktop
GetUserObjectInformationW
DdeFreeDataHandle
EnumChildWindows
IsIconic
EmptyClipboard
OemToCharW
GetCaretPos
GetDesktopWindow
SetClassWord
SetScrollRange
DefWindowProcA
GetScrollPos
CreateDesktopA
DestroyAcceleratorTable
SetWinEventHook
LoadAcceleratorsA
LoadCursorFromFileA
DispatchMessageA
GetKeyState
AnimateWindow
IMPQueryIMEW
PeekMessageW
GetWindow
IsZoomed
GetMenuContextHelpId
GetPropW
LoadIconA
PostMessageW
GetAncestor
DrawFrameControl
GetMenuStringA
GetPropA
EnumDesktopsW
DrawStateW
MessageBoxExA
InvalidateRect
GetMenu
SetUserObjectSecurity
DdeQueryNextServer
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ