Static task
static1
Behavioral task
behavioral1
Sample
Profoma Invoice 002.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
Profoma Invoice 002.exe
Resource
win10v2004-20230824-en
General
-
Target
4dd1a60ac2f17ea4c2e5a8a46450b16b8a983db09ec54349154d386453a01dba_JC.zip
-
Size
653KB
-
MD5
61521243662ad344fec198ccf4b4af18
-
SHA1
69b0f93fa933a1f7a57bb1eb27bdd73e57856d7f
-
SHA256
4dd1a60ac2f17ea4c2e5a8a46450b16b8a983db09ec54349154d386453a01dba
-
SHA512
cc7d70f9f3251478bbc2a43f1697b020b1a77f4e1d0c52cc8d6d5f5e2604cbba98d37176a03076af823f8eccecf7a2d81336d4a08df5f6d5bc3f3a80625ed8be
-
SSDEEP
12288:gG3E9dRGz6KJKsDvZf1IewbTVzfTOwzWnrbtcLG5dXQlWJ4bAGq:gG3E9DFqvRSHVbiiWftcLG5dXYUn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Profoma Invoice 002.exe
Files
-
4dd1a60ac2f17ea4c2e5a8a46450b16b8a983db09ec54349154d386453a01dba_JC.zip.zip
-
Profoma Invoice 002.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ