Proforma invoice 61198[.]pdf[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Proforma invoice 61198.pdf.zip
Size

554KB
MD5

11f8ebdfe8288d7a725b97904eea431f
SHA1

0fccb204f95fdbe0a9d87190845960cc32666961
SHA256

615a64f980d13f9e8e8d64b3d9ffaa260c0d8fd72fac1226a4b0f6ae438c514e
SHA512

b2f4b75f20cb1131921c3883d3e72adcfd36283a17c2a199a149ae61a5174fc4fbfe4f605e667086d23eae8b721c44b3742032fd0a3ca4b7b9cf5363a62142dc
SSDEEP

12288:TvyooHc3hahfVFIeBe0cc1Y0RWXv5TDegXQir+mo6NkG:ryomc3hahrdYASXg9mo6NkG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Proforma invoice 61198.pdf.exe

Files

Proforma invoice 61198.pdf.zip
.zip
Proforma invoice 61198.pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 649KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ