Static task
static1
Behavioral task
behavioral1
Sample
Payment Invoice.exe
Resource
win7-20230831-en
General
-
Target
6edb103bb062c44ab2be9f54e6100772a365bc4184dbd0b9dce4252f1ed03e15
-
Size
631KB
-
MD5
445d38917ae6e5ad09041b188046cfc7
-
SHA1
65764a5fc94aef4f130400747fe2b8e95a5805c9
-
SHA256
6edb103bb062c44ab2be9f54e6100772a365bc4184dbd0b9dce4252f1ed03e15
-
SHA512
27df9b272c8aae4b2dc955e062ecc63fc81f288b53615652eab18f2c9f032ed0194eb35133cf34ca782a9a9af2d467bbf753286ccd1e00a903dffd7f0d39b11a
-
SSDEEP
12288:RForgvIhAAqbXtIYVAo4gAgC7i4Vq10dBetYfe2vH6ln5j03afNH/r/oof07w6Et:RFo0vIh7qbdvYDgC7iKqidBetYWEH+jh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Payment Invoice.exe
Files
-
6edb103bb062c44ab2be9f54e6100772a365bc4184dbd0b9dce4252f1ed03e15.rar
-
Payment Invoice.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 680KB - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ