Open Invoices[.]exe | Triage

Sharing

General

Target

Open Invoices.exe
Size

638KB
MD5

3cf50c15d2c08abbcfcc58ee94ae75fd
SHA1

a170cfc66096715badfbce43cc0a3c18d5fd6d28
SHA256

f7a062cbdd22f2bd346f704ba3d4e1ca864ec525a4fa96ac2be1991faeeb5690
SHA512

0f90ba0ab8ef780a65286a335a9121c9eb5e8d88f6322bcf671b0cb44d954c1c1b9c268df4a754840e0866704f9e9ba467faa4133f0dbb92f0360a8cc903b254
SSDEEP

12288:gvoYmDHvCRKUletwzaDOPObzFhHvOj8nahu8nPQ5USkPlTAbCsLCmLB:gvobXUleqW7FhHvaTkuPQNYTAbbLhLB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Open Invoices.exe

Files

Open Invoices.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 635KB - Virtual size: 635KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ