Static task
static1
Behavioral task
behavioral1
Sample
invoice.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
invoice.exe
Resource
win10v2004-20230220-en
General
-
Target
invoice.exe
-
Size
777KB
-
MD5
a20a4bc58cd0e59aa876521d1b4e3691
-
SHA1
6cfbe4d044dc831656e42586035f8d48b5d5ffdf
-
SHA256
e2c2908685e1e75ab146191d8757a42fda84c0c0be27f2fd7fe301a8fc0bb679
-
SHA512
fad61eb803b7946cb3258a304d5a4f9a42736dbc3a4933b298f1a9cedbb5af88b39b1ed018d7206d0a427826ce37c63140108454b42c21438c42b2080e5e6589
-
SSDEEP
12288:ZYZfTPUhoX6yPHS0wtek96Akyxo4Xh6vXOsg358UAFLgch6VVCLv:ZGLUWFbKb8AvXoOsS58J07
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource invoice.exe
Files
-
invoice.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 774KB - Virtual size: 774KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ