Static task
static1
Behavioral task
behavioral1
Sample
INVOICE_.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
INVOICE_.exe
Resource
win10v2004-20230703-en
General
-
Target
71FE1D4E8E9A61A0AD9007E27EB0C79A5408C9B62B0E6330BBC78CBE36295651
-
Size
1.6MB
-
MD5
632e0fa2b7af52d09674e580097b6388
-
SHA1
c3b53bd2e02f98b81e27c8083792d94a86c90388
-
SHA256
71fe1d4e8e9a61a0ad9007e27eb0c79a5408c9b62b0e6330bbc78cbe36295651
-
SHA512
b19dc7fc9df6de372fa3b09437deeeaf9ebd65ec2333003973d6d8f214925395838358f2744c1d4d447faf2f946578db34b7bf642e7dc525ebdb558f9861e3df
-
SSDEEP
24576:3SWrMz8C3kJ+VnkaJ56TxIN84Mm/3ffb5GJ:3S0o8YXMFIN84X3ffb5W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/INVOICE_.EXE
Files
-
71FE1D4E8E9A61A0AD9007E27EB0C79A5408C9B62B0E6330BBC78CBE36295651.iso
-
INVOICE_.EXE.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 561KB - Virtual size: 561KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 254KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 64B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ