Static task
static1
Behavioral task
behavioral1
Sample
Proforma invoice is attached.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Proforma invoice is attached.exe
Resource
win10v2004-20230220-en
General
-
Target
Proforma invoice is attached.exe
-
Size
794KB
-
MD5
b256d535ccd4217d5238c23f85dd57f5
-
SHA1
a30813168a939185d2af7d7dbe2a52063f9cb9b8
-
SHA256
feb3a8fc0da4f632c7aeb9a19460d04f5881f592b5458988dfa61aa0fdc00d7e
-
SHA512
14f2693b880198841f270a09fbb7f54826d58d235c979dfecf72d7d51adf20488bae3c2aa5829e5ca8b09c6d021371f1fde3676e243979b5c48e8f4c9b2ad302
-
SSDEEP
12288:GycULwzxw/nm49a7oIqaVqORlsoJ3OtRm5WWhEl6J/xDmhuWqIvpGiMnKG3hg:XxLwz2vm49aEILVq/o9Ou5WWhEN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Proforma invoice is attached.exe
Files
-
Proforma invoice is attached.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 783KB - Virtual size: 783KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ