Outstanding Invoices[.]exe | Triage

Sharing

General

Target

Outstanding Invoices.exe
Size

888KB
MD5

07e1174aa10da669f830b7b855767b13
SHA1

6667d82f304bde8e23164beb4d0e2ee01533340f
SHA256

657c920b2a5333f8dfadd7fa40d1fa0e741526e4d539530961562f9db55ac27b
SHA512

1491f313906f20e5812931a278e499b800843f9c7f3bed56292e0791ed23c31277c0344ecbf23b5caab0809bfac72b2da26e3a0ba0041e7fb2466d0d3579b531
SSDEEP

24576:IgNAdGgb3oxQYs/eB9nwwf+bJPhuc2yINiGNZ:IgaG2o6YZ9jVc2yI3N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Outstanding Invoices.exe

Files

Outstanding Invoices.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 881KB - Virtual size: 881KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ