Static task
static1
Behavioral task
behavioral1
Sample
po1261Template of Invoice packing list3-2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
po1261Template of Invoice packing list3-2.exe
Resource
win10v2004-20230220-en
General
-
Target
po1261Template of Invoice packing list3-2.exe
-
Size
812KB
-
MD5
2116c6988adf5127efda7c5b983d163f
-
SHA1
8e5e2b6aefed9bb6d90f185feea18cd962ce5049
-
SHA256
0b7841ea5b8040d0a636dfb94f374666baec80ee31307dc156c947b287d8f1cc
-
SHA512
41adf03b6d6b5dc5cb97d6c26ead593e251830dad6219fe0b31b1b409be97595bc7a3f9fcd2a961152476af0b95214744b067a2590e19cfeac863887dd114d8e
-
SSDEEP
12288:klKnuTEXqXdVEzLHHYsoRuEyfW5rcfr0iVyoF1o/YPZqEJzIHDnaK:xq4qXdVUeRDr8r0VoTMYsR7aK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource po1261Template of Invoice packing list3-2.exe
Files
-
po1261Template of Invoice packing list3-2.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 796KB - Virtual size: 792KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ