Static task
static1
Behavioral task
behavioral1
Sample
Hana Invoices.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Hana Invoices.exe
Resource
win10v2004-20230220-en
General
-
Target
Hana Invoices.zip
-
Size
653KB
-
MD5
23d05431d3c34a911e40eb3133aeeb96
-
SHA1
d911608267425a0e66984e581e5cc3a3307f0af1
-
SHA256
6c050b0dba991e550745cf69f79ee7137f32ba18e2e36714aabc627d92b4327f
-
SHA512
1979da6324845aa447452e654c91b358c8e2ebd8177c649db557cdd91f6e59cb4df12ef1cbd7172620ec3fa45457e71defbb2f28fb7a6dc91085b97be0872ead
-
SSDEEP
12288:SR3c7IKAzaEGdPhC6NNSazOe2yFMAZLS0ena6lZuB37bri3/BLMZIud6:Ss3XRtN9X6AZLS0eJu17bra+jE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Hana Invoices.exe
Files
-
Hana Invoices.zip.zip
-
Hana Invoices.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 696KB - Virtual size: 695KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ