Static task
static1
Behavioral task
behavioral1
Sample
OVERDUE INVOICE.pdf.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
OVERDUE INVOICE.pdf.exe
Resource
win10v2004-20230703-en
General
-
Target
OVERDUE INVOICE.pdf.rar
-
Size
627KB
-
MD5
c22d6d12d63038dd8a09f29602b67a91
-
SHA1
562f810f823fc2ccac0c8eacfdc8bcc6fcb56c1d
-
SHA256
49cab71b39c8c5f6911e7ca4eeaf1b4b130146efdc9c764f131cdbb649324e5d
-
SHA512
30f66a0497cd2c2b1d066275b0d073fe768a88c4222eb03691bdc99a7fbc6f6b78e2ef313daab7526ea1709140c8596e73a1c33f069963f4b50d6bfbf8aeefcf
-
SSDEEP
12288:Twy8Q2PYex7VUMk0G9g5l2rh7WEc4XUKC5YWys1Euyzxco6Q68p2bjUnpyiucZ:TwrQ2P9Tmv9g54Jr5CuHs1y3jmjupyi9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/OVERDUE INVOICE.pdf.exe
Files
-
OVERDUE INVOICE.pdf.rar.rar
-
OVERDUE INVOICE.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 795KB - Virtual size: 795KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ