Static task
static1
Behavioral task
behavioral1
Sample
Invoice Payments.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Invoice Payments.exe
Resource
win10v2004-20220812-en
General
-
Target
Invoice Payments.exe
-
Size
6KB
-
MD5
b738c6433017de51b792aae287eb68fe
-
SHA1
99cfec13632bb396c779c131fb4b6435dc31cd21
-
SHA256
870e18ad1e9535442b48c0eaa16c62353b43474fe7c58bcd20a4172ccb793803
-
SHA512
7368d274e6193ed04988a4e4754d8fa270af5b3102e2f743d89bd65351058f8749ad5bf65bcc4b374e0eabb937eed11bc24ddf866de7e5ff0e4623c9667b6cda
-
SSDEEP
96:4X8nlt3L7EIz9XrRxLWjaDlDwNXN3QLIzNt:9LcIR3WjaDlkNXVQLK
Malware Config
Signatures
Files
-
Invoice Payments.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ