proforma invoice[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

proforma invoice.rar
Size

179KB
MD5

ff69f9f1ead541eb916d5625eedb2cf4
SHA1

2f147ffedda74980ebd23772b3f29f21f35de2b3
SHA256

0c23d319472587af6f709a81f3f6ef506fcffdbcb4bd2ed1f6a5ae5432e9d78c
SHA512

59bee450000cfd2969230c733d0e5472f7f164a21a034005fda2f61b656d3dfaeaefd7f153ac1910e0107f316babdf17469e853b22b9847ddbd6d61c100e3742
SSDEEP

3072:7eLYLX8iOV1+W5pnUivH+YfACQ8zQ8yXHHpoAUtit8RRGnqUPTx4V49V07tkeTZE:7eLkXga0Uif+X9XuAiRQnbPTOwV07yeW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/proforma invoice.exe

Files

proforma invoice.rar
.rar
proforma invoice.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ