PROFORMA INV 110856[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PROFORMA INV 110856.exe
Size

546KB
MD5

79b4a4b3bc4c1f833bd5bb07845aa9c1
SHA1

02ff29f4bc44b759259c541f32c8f7cf91b0e738
SHA256

a19a7f643cbad12cc1144bf4894bb452c67667c20f35de5f167d870b8e84ed84
SHA512

e5a4a748d726c2357dd51ff857984f286e4efeb5124fa160ad33c601afb9c86895efbb4e58cc2c7bd7f7840bff411b219167f4ecd23ded88426f51ce3511fa23
SSDEEP

12288:l+n0snDNxPc9GT2iKTY9NH/Smx4bfpwAc6s:EDPcy2i9/Hibfu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PROFORMA INV 110856.exe

Files

PROFORMA INV 110856.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ