Static task
static1
Behavioral task
behavioral1
Sample
Invoice Payment Confirmation_PDF.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Invoice Payment Confirmation_PDF.exe
Resource
win10v2004-20221111-en
General
-
Target
Invoice Payment Confirmation_PDF.exe
-
Size
457KB
-
MD5
685912ec974732b199f663f893fd6c94
-
SHA1
47bb8d6899f71d4fa6addbc349de1f3640d06b8d
-
SHA256
0df9a586e1104370c6ce9b15471e0696591db791b970a5c2ee0fddfec82a1cc9
-
SHA512
32c9563602a1796c9e3234fa305a56a84501c65180d52c5427df1e81b153eb11f108e09abc5c91f7ad659db802c750ad18ac4d3d97ebea70e467a8c258895d15
-
SSDEEP
12288:UbFDutOc6duxKLoG3cMnq/fMSZb8ih55qOdxDufo4v6nnjqKoe:TCifM4b8ihrqOdBuH6nnjqKoe
Malware Config
Signatures
Files
-
Invoice Payment Confirmation_PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 235KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ