E-Invoice000518020[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

E-Invoice000518020.exe
Size

528KB
MD5

c6bfea86008c2b4267a7be16094ec05e
SHA1

9a60f9e418fb3b6a2ebc9abcecc75994bea31bd2
SHA256

5f273aebe2382d4bd8848327b27b769977665826be46a21766b77ca7f98f9b96
SHA512

448450c0bd27e84ba271725833eb5589ce1e52cf90c96f4569bf3970a45caa9c34a3740fc722dd94bf9a950d1a6dcafca2a373c04ec8eb9eadde6065b75197c5
SSDEEP

6144:TM3xkZEVaJsUH/XJGSE4ZY5ZizPMXu2sKuKKHKG2Q1wTFGogKxbt9s7H7NlLGSaT:TMqEisUH/Mt5kzsLKHKGVQG8xbtonc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
E-Invoice000518020.exe

Files

E-Invoice000518020.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 512KB - Virtual size: 510KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ