Static task
static1
Behavioral task
behavioral1
Sample
ALPhJU7l4bwEC6t.exe
Resource
win7-20230712-en
General
-
Target
Outstanding invoice.PDF.GZ
-
Size
452KB
-
MD5
e7a6eb5f3d0fcfd588c67dd917db4363
-
SHA1
ac985ff9c97349f7138f0e08c8238cc1cbf137bf
-
SHA256
dc65b8d9450ca0ffce51eaac9b587c84a5a3f2fde1004110524c1551c9907225
-
SHA512
db967831da611a4ebfc80fdb05ef2aea4c51a20bce1d7b340cad46597e997758bbcfdd1f29411ee15188c5593a9977b849d8f0d3a1b446ad19f57f6738fc66a8
-
SSDEEP
6144:0yLi+WnOSG+JMD7f4+HpAn9uxGvlYYvHTp4ze5zc8zWGzUaqxHO216BD796lOWe0:0C8OS1WA+Hprx+p4zmDzL9j9qOLkueaU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ALPhJU7l4bwEC6t.exe
Files
-
Outstanding invoice.PDF.GZ.gz
-
ALPhJU7l4bwEC6t.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 509KB - Virtual size: 508KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ