Static task
static1
Behavioral task
behavioral1
Sample
Invoice.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Invoice.exe
Resource
win10v2004-20230220-en
General
-
Target
Invoice.exe
-
Size
691KB
-
MD5
13278604c15ed4348d9930adf07a4581
-
SHA1
bc06c033b8c2ac5216fc05ff3e0cc38ae554076a
-
SHA256
d8c7505747b616cb5973d7afafacde6ce281d838cfe3c90d6192fc26be5e8165
-
SHA512
50541fd68c79717882b563642a7b8617af7a329e86e2415d0a81614c1e08f70829370820ab89913eb085f707a8d99425b5f13680741e54382f789dd0b74339b0
-
SSDEEP
6144:aEAYdREgD8PS4N5I/jSqZZBrlfw/3ZPlqC3o3lxbP2BpAt1cEmRcrKjd9qSjNAsN:28bD8PSljS8Zbf4l02/AmRtxUAZHj8W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Invoice.exe
Files
-
Invoice.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 689KB - Virtual size: 688KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ