Static task
static1
Behavioral task
behavioral1
Sample
Freight Invoice.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Freight Invoice.exe
Resource
win10v2004-20230915-en
General
-
Target
Freight Invoice.exe
-
Size
840KB
-
MD5
d3c0249433ad9d2b1d3ac22c4a605922
-
SHA1
3584b31d6977bd5155fa5ee7a9c56ed6fea709fa
-
SHA256
9f9dd91a9d7373e39a8e7adc7e7ff1adba045e4590798eaf47f2a701e8036331
-
SHA512
e4243e01a1f6e78c2ac258fb0646d0e509222968c0d1d88c6275cb84c344b8d2f02d8c31e6a24072acabe6a2dbe6a072086b29fd267723f6c35a815c28cdd587
-
SSDEEP
12288:V05fVsbR2DorOWw86zYrXW6iVST9e6c3li8ogBNS4rxG:KtO2DjWwDkrm+GlRogBNL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Freight Invoice.exe
Files
-
Freight Invoice.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 652KB - Virtual size: 652KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 187KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ