Static task
static1
Behavioral task
behavioral1
Sample
INVOICE_.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
INVOICE_.exe
Resource
win10v2004-20230220-en
General
-
Target
58EA74166EBE5C674E51DDA009CC8EA2D3FF4B182A31EEE7287F6D1AEB6387E5
-
Size
1.2MB
-
MD5
a0fe54bae940f441c24ec756159de452
-
SHA1
9db6d7b779435ef496710f5a34a8d0951a86114e
-
SHA256
58ea74166ebe5c674e51dda009cc8ea2d3ff4b182a31eee7287f6d1aeb6387e5
-
SHA512
a461e944e51c216974676e2b1ae06f30bb63ad22e8b9243e557eae5f99f789863b778525a2e3ad60453da878b88ded4ece5753c21e2b6b28afaa1f1cbd113c61
-
SSDEEP
12288:wx3H1Rp26+kqoA+c0K2I8YdwrWCAAT6JlK0:s31RAeqoA+c0wDST6F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/INVOICE_.EXE
Files
-
58EA74166EBE5C674E51DDA009CC8EA2D3FF4B182A31EEE7287F6D1AEB6387E5.iso
-
INVOICE_.EXE.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 421KB - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 258KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ