Invoice[.]pdf[.]lz[.]rar

General

Target
Invoice.pdf.lz.rar
Size 561KB
Sample230911-h68fysec2v
SHA256 fe278c3a90fec27d75fbbadb5f0d1b782d51bf7dd269a0ef60fe3848a6760965
MD5 e5fbaa055285fc0a7519e44c45ecb9a8
SHA1 11320b1ba29323710b3445038bbb63b90a5d6956
SHA512 cbdb0869896dc05034d28f3256950d1977992c489609ebaaad81452aae60b422d53ff60078dcd424e8e2d474c86e3efc078e6491b48cb432d44a903b20ef44d1
SSDEEP 12288:SWjxx/5juks59oB9crIVxdfgyjPbWlRcdCfCYhsHB7xwQvQcqBSFRHfyZ:Scx55ak69Yer0bbWvcMC1xABc/Y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Invoice.pdf.exe

File Explorer

Invoice.pdf.lz.rar

.rar 561KB
Invoice.pdf.exe

.exe 612KB

Invoice.pdf.lz.rar

SHA256 fe278c3a90fec27d75fbbadb5f0d1b782d51bf7dd269a0ef60fe3848a6760965
MD5 e5fbaa055285fc0a7519e44c45ecb9a8
SHA1 11320b1ba29323710b3445038bbb63b90a5d6956
SHA512 cbdb0869896dc05034d28f3256950d1977992c489609ebaaad81452aae60b422d53ff60078dcd424e8e2d474c86e3efc078e6491b48cb432d44a903b20ef44d1
SSDEEP 12288:SWjxx/5juks59oB9crIVxdfgyjPbWlRcdCfCYhsHB7xwQvQcqBSFRHfyZ:Scx55ak69Yer0bbWvcMC1xABc/Y
MD5 SHA1 SHA512 SSDEEP

Invoice.pdf.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f6ceb475c843b5339bdd85afc176eba77bf0d7a133afa4e092e3cd9e93889a7a
MD5 eaf25ba217e18c943a09c2d534ca4efe
SHA1 1bfccd6fe9b46f43c9056b21c8c1ef4ceb4108e2
SHA512 1c34a7f2f16aa4db588960ad73ba6c7890121b8973fa725353dcc0b573e0bce58501c1e992db0fa99d0cad087fe864aef5272380704767a899e7bea3cc0a1e23
SSDEEP 12288:A3t2iNHkDwMD8DYQ8r83sTyQoTOWE95IY9RdmrdL4u:A3t1RkDV8DYQa2fQoTOldm9
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

633170

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing