Static task
static1
Behavioral task
behavioral1
Sample
Invoice Overdue_C0809-H03.xls.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Invoice Overdue_C0809-H03.xls.exe
Resource
win10v2004-20230220-en
General
-
Target
Invoice Overdue_C0809-H03.xls.7z
-
Size
531KB
-
MD5
e0453eb56d974bb704e7f537dac5853c
-
SHA1
4f65f95d70d5f0d28752124692ad8438b0117f1a
-
SHA256
7676ba6454dccd36def42032d399fe4bdc48802f9c2c40702638e3887b865fe1
-
SHA512
0cbf01dc0d0bfbf0e8dd0e8061af09942fdf68948f8a1daef1eed90af755e17c6ea45f1668eee3db54c042ec0b4ea631b5f651391f5ecb0fde6dd8f24fcdde9a
-
SSDEEP
12288:XX6kljAJS3VziBD7JgvDxgvSSDxmKyCs9eE:XXdLVziZCrxcs5CssE
Malware Config
Signatures
Files
-
Invoice Overdue_C0809-H03.xls.7z.7z
-
Invoice Overdue_C0809-H03.xls.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 694KB - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ