Static task
static1
Behavioral task
behavioral1
Sample
Revised Proforma Invoice WSI116850PF.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Revised Proforma Invoice WSI116850PF.exe
Resource
win10v2004-20230220-en
General
-
Target
Revised Proforma Invoice WSI116850PF.r00
-
Size
462KB
-
MD5
4ad19f3b83382bd4874693be46fae7c3
-
SHA1
fd4db67eebeab60048a85e2cf9c10510d815af58
-
SHA256
42c9d1c730159fea42ed1ae38835ffc8427baf94e5e5fa59e9b140b505cd273c
-
SHA512
204326728773f38b7ef8b2bb0ed2376b0c15a697db4686fa56ebea77d3fefb5bf6406e59f7b8f6f1f8d862fe8c3b36a417977fd620c64523c075eb5627fc8e96
-
SSDEEP
12288:wwc3aeUzJhOFbM4W1lBzoEfPWMquVdnAyL4bry:IKemfOFbDWfC6KCtke
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Revised Proforma Invoice WSI116850PF.exe
Files
-
Revised Proforma Invoice WSI116850PF.r00.rar
-
Revised Proforma Invoice WSI116850PF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 881KB - Virtual size: 880KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ