Static task
static1
Behavioral task
behavioral1
Sample
Invoice.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Invoice.exe
Resource
win10v2004-20230915-en
General
-
Target
Invoice.exe
-
Size
699KB
-
MD5
6f820a4bdf920b7cfba582b2f52aac87
-
SHA1
dcc2e483f5cfeb42ed85cbe877a4fea3f81a3ea9
-
SHA256
7b2594bef48e15617990e73122879220c97e63fd640d88c9570c4e86f130ece8
-
SHA512
ff0c010313d1189d08102350d7e646a598b32990aff7f848b81719601b3692aeab039b3c77df45115c0bea42b5f93f53f61c8757c57ec33f5e7cc6da592715eb
-
SSDEEP
12288:ecuAckjsqKDyng/mwz1btO+6755N+l0DHDlZXc7c9/ckOWtGs4LBkgpD7ET:mkYDyng/mwxbEHQqHbH/+FL2gFE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Invoice.exe
Files
-
Invoice.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 678KB - Virtual size: 678KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ