new invoice[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

new invoice.exe
Size

1020KB
MD5

e211d10bedb3b88797da5e1b1bc8078a
SHA1

6670f59ac566e8125e2341bd7a46a6bb5cd57aff
SHA256

a496cfdcaa099d866a51c5390bc5a01e628de20791f355f7c716f484ba9b690b
SHA512

4121ba411454495afc738c519bf891555d4e795e842084f6627645058143f759a07a45a945d0bc91335e8fd8f4003fddcb8a8437c9c53c6849713a94946e1cdc
SSDEEP

24576:01I1R1I1nRs6CE3jLMpppdpppppUO9Rs6CE3jLMpppdpppppUOxOguCU89gVRi/1:0GvGRRs6CE3jLbO9Rs6CE3jLbOPuC/gs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
new invoice.exe

Files

new invoice.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1017KB - Virtual size: 1017KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ