Invoice20233[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Invoice20233.zip
Size

688KB
MD5

624de6b95e0057d42fe22be981e5ca38
SHA1

2ea916c70b63b73f40a3aa02394556d82df3a835
SHA256

ccaeb0b170886fff263b2ee340badd07aa90186db8616f8947f330b5380a9a25
SHA512

c5f37dc5b56a74dedaa25ac7f617f9ddcf90376c2b6b871b92833c16ad5f1c3258baa7fd17456aa41cd43e480e48caba35d9d4c208b2cce8ea2687ecb77c2d15
SSDEEP

12288:9xh8udmSO2y1akaYe6UhdnzgVWIlagatpd94q6CSztMgcFtZGeoPZaNMXf1vsW7b:1YSOTwmUPNOajfUCQtMVZGzzXf1BP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Invoice20233.exe

Files

Invoice20233.zip
.zip
Invoice20233.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 805KB - Virtual size: 805KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ