COSCON-Proform Overdue invoice[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

COSCON-Proform Overdue invoice.exe
Size

1010KB
MD5

8295981a0d4d8adb7fc0595032b8ede1
SHA1

3726dd48b37457fe833e053c108ecd9cb671614d
SHA256

5d636852cc55c97e4be8ac1fcb06449942f74d2cfc1528c0149049f2cef1bf67
SHA512

f88f4c19770cc34e4d371432f6ba0e9aabfc343e90fcb6c680c88d0409c72ff9b9db5f548161cc81dc9c4927ec9536307c8481412ad1629227bff5e8e9211a01
SSDEEP

12288:DEWVyfyaUv1K8tUyZmMRxEy0ge5HKQfxOVsXUop94fJ+e9MA081a0epg5G8Dojad:DEWsKarJIJ+er1a0epgYelb4O

Score

1^/10

Malware Config

Signatures

Files

COSCON-Proform Overdue invoice.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1008KB - Virtual size: 1007KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ