Static task
static1
Behavioral task
behavioral1
Sample
Invoice #290202308.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Invoice #290202308.exe
Resource
win10v2004-20230831-en
General
-
Target
db813eacc12617bc14f34bc81e147c65.bin
-
Size
296KB
-
MD5
d22c189c83d871492dd1b69b7183cb82
-
SHA1
1354a35702eb9dfe77164d8bfb53d3dff3544cd9
-
SHA256
0c3e2cb8486ccdc6e64b443642f107bfd93752f4bdbc566cc2cf8643aba6f8fe
-
SHA512
6d139f35bcccc7b3860bed6c5215b556b928f611da8bd141c7b166d72ff234f9550fc5b1b82235d4329386736751ae5fc41ee6dc7070f6b6b29518cdf602d264
-
SSDEEP
6144:IEp+ylCEnV+Co55gJECqTTKYWB6uL0rFKHeO9Aff9hBdEkgCCNoo9:JtlCkV+oJEkYWBfrHeO9Aff/BdEkgCCj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Invoice #290202308.exe
Files
-
db813eacc12617bc14f34bc81e147c65.bin.zip
Password: infected
-
d4e08de498ce2a3370f63a5cb16ee944c8b870500adad95f446d2e47103e7847.rar.rar
Password: infected
-
Invoice #290202308.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 811KB - Virtual size: 811KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ