advance payment invoice[.]exe | Triage

Sharing

General

Target

advance payment invoice.exe
Size

671KB
MD5

eedab4f7b05e7bbeaa7544f375429b34
SHA1

a9260d332418ab1f387367a62298386df85971c8
SHA256

ea5d05e0b638ccc55cf1c7d641e6ca67ceb79ac5e4be6ed178402cad263efc7e
SHA512

dc2c9ccc815e769a7a85a56f06231c06ef18a941710a06fa553fb360faba8af1d9b67bfa4dab09296fc920d659912045c894aa67d718e33bf16dece8d6ee1edb
SSDEEP

12288:QpmZ6VrKIhQBi50HAJo8JA0o5ZMZ1hVI6wVubK6qrDHKAQfvBUCHnCF:gmZ6VnBcArA0o5mZ1L/KJfHAX22Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
advance payment invoice.exe

Files

advance payment invoice.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 669KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ