Static task
static1
Behavioral task
behavioral1
Sample
Invoice Ningbo.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Invoice Ningbo.exe
Resource
win10v2004-20230220-en
General
-
Target
Invoice Ningbo.7z
-
Size
651KB
-
MD5
690f70aba58537c002e0f185e022c339
-
SHA1
54925df1ecb0a65129d6ade41fbf696294ef28ad
-
SHA256
39484403876fac22cf3294753aadcd578e5bdb136ba8ef4c916a3b97c56da4c6
-
SHA512
9b34acb3ae2f7793d8f9daf2e79608e9273a81d8b5cbd0a554a6b5e0fde08a4f5d8705d748e0c4dd5d81267a9bbddf2ad55bfc9732359e8ca6e894b24a1f1299
-
SSDEEP
12288:h8aKAp8Xp4DP999i7ytkOs2T71x7lHdn+lmwIC1KSu3JoYSLR:fpyp4Dl995kH2TBx7Tn47QSuybd
Malware Config
Signatures
Files
-
Invoice Ningbo.7z.7z
-
Invoice Ningbo.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 744KB - Virtual size: 743KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 202KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ