overdue invoice pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

overdue invoice pdf.exe
Size

724KB
MD5

b02b7bcf95fbb5a49052f7ecaacc0307
SHA1

4f42c86560054e794337df2f5e1078cd7bb62b2a
SHA256

832d1e7aff9cc3600ec1c6deb39c571184e02cb5aea81538d91b4e9a805ea58f
SHA512

daa2fafab673beae4acb443818f11ac8ad84b14f73fe100dca2393b6a203d90f934138a7fa8c07da618115a9ae5dfda7b7ab0af9e2f1919ac32a457f6f8583a6
SSDEEP

12288:HdfSRtaV2lq3PaGhTono2MJYwWzdW6pHH+aXVOkS0Ty9bkiDlq5a:HHV2lq3yCotQYu6VXVOkTSb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
overdue invoice pdf.exe

Files

overdue invoice pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 722KB - Virtual size: 722KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ