Static task
static1
Behavioral task
behavioral1
Sample
Confirm revised invoice to proceed with payment ASAP.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Confirm revised invoice to proceed with payment ASAP.exe
Resource
win10v2004-20230621-en
General
-
Target
Confirm revised invoice to proceed with payment ASAP.rar
-
Size
552KB
-
MD5
47862a6458cffe335a6950673530fe88
-
SHA1
7c10333ca76400df2368baa11134821d5cd735cc
-
SHA256
096dc9d1c1b50a5dfb5dcec64183b2901441b43343308c890b4a82293eb18f39
-
SHA512
f3119e008789c508ab37edd57af62cf4edd70b4b071c0f267c97307f74e750f202f4bc1f0094851a601a05284edc1b76cc22deb8bfcdf66197796e2dcf7895cb
-
SSDEEP
12288:/76FMeJtbo4DeqDKR3ygBslOa+5Wwt+Ht0RGrT8fnEFFBLFz4Mp8bLS:TOdorqA14sUwt+Ht0Rm8vuFBLFLp8be
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Confirm revised invoice to proceed with payment ASAP.exe
Files
-
Confirm revised invoice to proceed with payment ASAP.rar.rar
-
Confirm revised invoice to proceed with payment ASAP.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 598KB - Virtual size: 598KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ