Invoice 38129337[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Invoice 38129337.zip
Size

527KB
MD5

5d0b49c20a80b2418817b938e73f692e
SHA1

09cb9dd8d225fbedf4574801a154578391f6cf79
SHA256

69fda878abeda48e2fded39dd050e9c192463bc695a1afc0dfd9d0c071fb06b1
SHA512

c063f0e628d470fb90d3124fc0ba21791ca031d3fe4a914e726656d09488094daf0ec6bdd708290abfdf39634ddc3bd7f228051d7605bb38dcd472cf14341caf
SSDEEP

12288:szr0yLcEBUz3oIYY9a1rK44lzA4G1fragzgz1aiY:qr0yLnBUz3OtU5G1lzuY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Invoice 38129337.exe

Files

Invoice 38129337.zip
.zip
Invoice 38129337.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 662KB - Virtual size: 662KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ