Invoice_423890[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Invoice_423890.exe
Size

955KB
MD5

6adb4394ebf71351a80306d0bbe502e2
SHA1

164d782940bfda3043dd18604652cf7460202694
SHA256

518f9978908ed3b16dc50aacf5cd9c749202ed43c6e86c687471586ec2175093
SHA512

74a35fd4ec34ccfe884a6e179948ff17f59547c6cb81448469c1a200bb0283b830c955be5dd99fc55e44b75f0f86c31e89beadaf9f4e78118d04c07fd04d2cf3
SSDEEP

12288:X0gQ89VsBaf5OrD6DWBJt7ZgVffrXiA1+Uefuo6rkG/dlwp1Utt3izY6TIuUvH3B:Xq89VQafuDMOr72FT71Euo0kCw4T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Invoice_423890.exe

Files

Invoice_423890.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 767KB - Virtual size: 767KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ