Static task
static1
Behavioral task
behavioral1
Sample
Proforma invoice.PDF.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Proforma invoice.PDF.exe
Resource
win10v2004-20230220-en
General
-
Target
Proforma invoice.PDF.exe
-
Size
736KB
-
MD5
c933c0aec2836b200c3a46ad89421b70
-
SHA1
07b7b37fcdb4bd8ab72f51957f1d090d842bc800
-
SHA256
9a9a651e84d6fd857279cf6e82ec3a888a1271ff900d0ec11585dd3877afeebb
-
SHA512
c7e17625cb28d5d970a3eca453a96bac43ce0a157f7a78290d1494a145e310f37edbab0a281897c2eaeac8c8f2e2f5cc573eb56dff615ec5574b96b49f2a79da
-
SSDEEP
12288:gayQcRUoDkUuXTd+2Us7LKRqfqx6WAGlR/4Hv5/:lGSoYzhL7uRqk6WJf/2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Proforma invoice.PDF.exe
Files
-
Proforma invoice.PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 734KB - Virtual size: 733KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ