657abefca3a067efed27912ee3acbf4adc2de26060183282a06dddc1dfdba24f | Triage

Sharing

General

Target

657abefca3a067efed27912ee3acbf4adc2de26060183282a06dddc1dfdba24f
Size

602KB
MD5

144dbe084df9fd6a96ca6899e533186f
SHA1

fab8612eaca4b97378c6ffc6053c89d4c8cc922d
SHA256

657abefca3a067efed27912ee3acbf4adc2de26060183282a06dddc1dfdba24f
SHA512

21516c5a18d4476768678eec725954d71069aea456f6f9d8068549ee53ab4a5d4f0c65228cda995e6cdddc7020a5ccd08b0c60469d870ee1d200d4f262820cfa
SSDEEP

12288:y26t3feQT4mXuELY2oJj9bWnRfrXkatHVSpnWtHtjH:y7fei/ukIKt3egb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Proforma Invoice.exe

Files

657abefca3a067efed27912ee3acbf4adc2de26060183282a06dddc1dfdba24f
.zip
Proforma Invoice.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 707KB - Virtual size: 707KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ