Proforma invoice attached[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Proforma invoice attached.zip
Size

544KB
MD5

4693b7f3269066ee76832ecd5ae00163
SHA1

d5f2f737eb27ba5a96a78c20819f33b1b89ac692
SHA256

560fc8769dbd722a285f4d1d9de1a92cf47c2573432c93c2f27d9160920b0597
SHA512

297293be14f713c178820b7efdbb809d0a1af48ccbd18e6fc6b2e1144d0befa9f0026b0e828b7076190dcaf11add9cd1434cad0af7b0a5b05b4eea1bc646744b
SSDEEP

12288:kW4+p6HR3+kWWGhq71eOBDQ9C84jHptOH6hQ4XUs5YFfbVrWLd8fFzHt/B7:J4+YR3+DRhZEQ8/BhQls5YFfbsLCzHth

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Proforma invoice attached.exe

Files

Proforma invoice attached.zip
.zip
Proforma invoice attached.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 585KB - Virtual size: 584KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 536KB - Virtual size: 535KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ