Static task
static1
Behavioral task
behavioral1
Sample
INVOICE.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
INVOICE.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
PARKING LIST.exe
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
PARKING LIST.exe
Resource
win10v2004-20220812-en
General
-
Target
INVOICE AND PARKING LIST.zip
-
Size
1.2MB
-
MD5
db56643cb6a4add54bf57c7426982d30
-
SHA1
7116d794e2444e43b03af651322b4267dbbfc58f
-
SHA256
ac9c725cf556ad7f1d9e69644e648efe0d03efb209c91aef14be27f272e7cf47
-
SHA512
aff523c506f54c32e921f7ca08825a9b6300acc653e1a29d74826e9852b321d07d7da68be4762fc8cbac97d5e7f81c97260d353a20b357f3e30fab4887c57c95
-
SSDEEP
24576:oxgI4V8VD4GfyG8X7vpXco8elYI++0Jz5xgI4V8VD4GfyG8X7vpXco8elYI++0Js:KgIRV5fyRXzpsTelWNBgIRV5fyRXzpsC
Malware Config
Signatures
Files
-
INVOICE AND PARKING LIST.zip.zip
-
INVOICE.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 704KB - Virtual size: 703KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PARKING LIST.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 704KB - Virtual size: 703KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ