overdue invoice pdf[.]rar | Triage

Sharing

General

Target

overdue invoice pdf.rar
Size

695KB
MD5

0a46639be287efdd80c383559c102d6f
SHA1

8dfaec552cde46b3bbc05afe349dbb0034099fb2
SHA256

7f9dbb80b521659c42f8ea8199a508f454a5ebe4a7960f90c15f1f1f9f4f471a
SHA512

78007dd5fc177945821066a4a6c5d18af93c727c16c0bb653ea510cba5100e07849afb88c4e61007135ee2d1ea6d18e90b884a6d0f72762093b148f0fc0bd342
SSDEEP

12288:tGNk/pN3wzUep9XTWd39CrwtRKhIENylDEvQ/fFmEJhrHD1ONqN1rKUaD+6gaW:tKcN3wzx3TrwjKCDNVme5CqfkD+b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/overdue invoice pdf.exe

Files

overdue invoice pdf.rar
.rar
overdue invoice pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 839KB - Virtual size: 839KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ