Static task
static1
Behavioral task
behavioral1
Sample
Contract Invoice document.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Contract Invoice document.exe
Resource
win10v2004-20230220-en
General
-
Target
Contract Invoice document.zip
-
Size
551KB
-
MD5
32b849ed199ed0ae0c42e23fa5337436
-
SHA1
6aedc337d66725a768124d9b088b050f138fe2b7
-
SHA256
1ba78ff4aad674810f2bd6bd9d0153d4b22423601805cf0beb1d198a05d6c0d9
-
SHA512
68b28b86e45dbafe7adad003c50a8d3b36516be9b1fd9677c04a5a8fad6c039d125b6f1d9f14158fd1bd29728efb662380170b3e8afe935ea314dbf99a308db3
-
SSDEEP
12288:Z+MzwULHygZjYRH9Kb5Fq6W20kMnB3af5TmL5YCpkIHx8:ZpztERQO6en4fM71HS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Contract Invoice document.exe
Files
-
Contract Invoice document.zip.zip
-
Contract Invoice document.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 697KB - Virtual size: 697KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ