Profoma Invoice 002[.]exe | Triage

Sharing

General

Target

Profoma Invoice 002.exe
Size

1.2MB
MD5

b31f324048caae7553049b5250a3736c
SHA1

b01b35659dfd23d3af0f23f377fc43cf0222ba7d
SHA256

19ec222cce07fce56ace6fa9a731e880877408398bc912c0bb711984decb938f
SHA512

f902e3fbe5d729cd6c417c2b914c1bc81d2a7ae0d5ed3eeb4f3e8f22ee43a85e916fef610d7d293983901f1db18bc4dd62a07c905631d9fa9cb7de2180024c0c
SSDEEP

12288:WQxBBtnm3n0He9DlpzIpk1qaxbxQxkT4/rJw8flwykcnM9lPuTO47QpilQP/dUBW:O6vtSHVZiaWRteNG5TBr6m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Profoma Invoice 002.exe

Files

Profoma Invoice 002.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ