INV002[.]gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

INV002.gz
Size

574KB
MD5

d8acf9cbb16b910d0f767e0d0f8d2919
SHA1

fd506d395aa7cc7ec541143df68c94bc234e16b7
SHA256

95309fe28d8472a4bb7ccff583db589896bc704fa7124f625755ecc1d7119403
SHA512

f8555a6a37e4cd0615a53661f5432e437aea9bf1da2d0a3d5e4115b836e3fb5354701eeaca6164492e85d286fa43d3feab2591c0bfe457dc85209b9c3194dd2a
SSDEEP

12288:eYxFPwaqdSg9HhZ/lCNq5z99ViaA4u1HxwW:eYxWF99HhZ/lJ5zdiN1HxwW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/INV002.exe

Files

INV002.gz
.gz
INV002.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 635KB - Virtual size: 635KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ