Static task
static1
Behavioral task
behavioral1
Sample
Invoices-pdf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Invoices-pdf.exe
Resource
win10v2004-20221111-en
General
-
Target
Invoices-pdf.exe
-
Size
805KB
-
MD5
f31047bfb4da86bc2dec4d9617344abd
-
SHA1
b782e93aaa86fb04e0ef07f6ede47fa1a72515ec
-
SHA256
9a96b0bd5e939ce3a077ccbdeb4d80cdcf95da219c4b4a97200c9afe5364600c
-
SHA512
75ba7b5365bf0126eb4fead02f2546437b183812e0ffe9487c103384440e4cfd7d97833cb06ebfcb2de9fa4b72640da8eca6da4fe5fc9d03dc9ceb9b5fa7df6e
-
SSDEEP
12288:f6C2iNVGbvQvDzaJKnqbC8J9wjNAzW180qVKK4OcWyU2vISIKxs3FAlZ6B:yC1rGbcx8+om8/46noFDOulZe
Malware Config
Signatures
Files
-
Invoices-pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 787KB - Virtual size: 787KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ