Static task
static1
Behavioral task
behavioral1
Sample
Invoice 2998.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Invoice 2998.exe
Resource
win10v2004-20220812-en
General
-
Target
Invoice 2998.exe
-
Size
554KB
-
MD5
e577da1a3bab565088d0d27a5f3fa19d
-
SHA1
790a7967ef6c5a1570408b25b583c784a3075934
-
SHA256
1f88829425d3e18a66b2327a1d21f4f5881b92ab8cce935b5e89b62403d4f9cf
-
SHA512
f11409f1ebe9ec4c469c37578ff916ab537110abe78471332c71b017e7dd3b88cd8cd9d112f89287782c699e88e680c217b6c01ec2af73901cbaa8ba27576d99
-
SSDEEP
12288:UK56DWgvMI8aKalQDKUwlqK5fRfIpsqJXkdBr89nl:UmvId8S8wlpRg6c
Malware Config
Signatures
Files
-
Invoice 2998.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
+5C`mUg Size: 510KB - Virtual size: 509KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ