Static task
static1
Behavioral task
behavioral1
Sample
Confirm revised invoice to proceed with payment ASAP.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Confirm revised invoice to proceed with payment ASAP.exe
Resource
win10v2004-20230703-en
General
-
Target
Confirm revised invoice to proceed with payment ASAP.rar
-
Size
71KB
-
MD5
b2da7c8e25c5f3974a6075bdc8ac019c
-
SHA1
d1e316a5a7f65c368ec4317b4f5a3a5b55613d3d
-
SHA256
cf1d301c75547b1d941f97bea8a443b264159e07d37bedec783d9a219bc85b70
-
SHA512
cd62231d74505482adc3ec552a3b90be852dca260f24adc48537e525a8b2aba195d0bf91b87b70d826cb23d92cfef999ea55fd0d6f82fc1b034ef74d375ed61b
-
SSDEEP
1536:aFn/UvU/VuZhfVqS7Hwk4WAl8+wu+wIJy2btOtuOcR0tAeMBIKGgTTH:G8vUdqVPH5Hu/IJXbtAw0ZMCvgXH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Confirm revised invoice to proceed with payment ASAP.exe
Files
-
Confirm revised invoice to proceed with payment ASAP.rar.rar .ps1
-
Confirm revised invoice to proceed with payment ASAP.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ