Static task
static1
Behavioral task
behavioral1
Sample
PROFORMA INVOICE.exe
Resource
win7-20230831-en
General
-
Target
2b6214f75cf3002043a68c65e7d9c56409e8c12d952e124124f33d53b01f3118_JC.zip
-
Size
86KB
-
MD5
876e6ae8df8cbdda4301bc79b3184e59
-
SHA1
7720d370e53c1c6ca2df4d7e23a5ca10b910b2c5
-
SHA256
2b6214f75cf3002043a68c65e7d9c56409e8c12d952e124124f33d53b01f3118
-
SHA512
6d108107f3ad646409faf3e9eda5d86ae92d548447ac2ee9dc548319532a952f155996cee89dd4129d0622164d02ffd3e482a62ff82a235107bd9b981c78c882
-
SSDEEP
1536:f+9WF9d2gmxXuVY3/IgKcDFHXLcefoq5ZsOBLcgnJMR4eM98oPMMy1:f+0bd2Txn3/IgKktX4xqfGGiSDs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PROFORMA INVOICE.exe
Files
-
2b6214f75cf3002043a68c65e7d9c56409e8c12d952e124124f33d53b01f3118_JC.zip.zip
-
PROFORMA INVOICE.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ