Static task
static1
Behavioral task
behavioral1
Sample
Invoice AR20230714N.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Invoice AR20230714N.exe
Resource
win10v2004-20230703-en
General
-
Target
Invoice AR20230714N.exe
-
Size
1022KB
-
MD5
5a15707348fe2b10d72b2214f9da79a5
-
SHA1
eb64892227ac7fe63caf8f74d81e90601454fc64
-
SHA256
f468e71c51b81601ee1c836199470b669e9c5dd83d931890b406dc82744bdd1a
-
SHA512
1df278f1d9c509638d9e7792dbb1ff8a6916616880afd17ac30c9fcc125fe8eeb7488d5178cc7ccba3f51ceecbd0b518f6cca5fe70fea8f806d1d31608ae23e1
-
SSDEEP
24576:7gynjGJDNUa3EIZ9m3gZl1tt/XTFz7N5FHH+HHHHHWHVHCUXGHnHHhHraHoeXO:je5T5//XRz7rFHH+HHHHHWHVHCUXGHnt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Invoice AR20230714N.exe
Files
-
Invoice AR20230714N.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 824KB - Virtual size: 824KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ