nproforma_invoice_pdf_exe[.]xz | Triage

Sharing

General

Target

nproforma_invoice_pdf_exe.xz
Size

421KB
MD5

b2a16bb2099491cc7559b8ff8be10cf7
SHA1

44163bc54d77d38431cdd0f62ab88bc1c7a4ca7f
SHA256

5080cababc69ddd61e9111921c7883e1e108f5bc35bc0b630f1b50e0da7595fc
SHA512

ccc37301f560c6ecd8fcaa99dec79cb3c36fd549b93715a09687cdbf6b27afadeff6fc67204beeae75e87c842ba669eb0a56189c6d5c1d7c20ca5337917acd7f
SSDEEP

12288:Bjzl+CtDPuneCEthXDPbGXD8iOPVOmcVwK3U:BjhNDOUXLaXDgefk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/nproforma_invoice_pdf_exe

Files

nproforma_invoice_pdf_exe.xz
.xz
nproforma_invoice_pdf_exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 350KB - Virtual size: 349KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 379KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ