Static task
static1
Behavioral task
behavioral1
Sample
Invoice.exe
Resource
win7-20230831-en
General
-
Target
Invoice.exe
-
Size
619KB
-
MD5
9b72692e206d68443a96079389898ee5
-
SHA1
8512515d696683c9c994f9fd8878b1b3b80299d9
-
SHA256
9886fa5dd072d4bb23ea5353ac0014d36b5425f49fdb0b315a2ed54cc5fcc33d
-
SHA512
a265e32d9dc6837cc8a1497c31f5630ab634a7a192c8c361b5ce7350fbe93cfa4c8fe3f77897f34bf0f45dbd45021527a7ff2f6f2b08f5640ce371f062f067f3
-
SSDEEP
12288:KMYnQ3j67SESV1eXl8OhA90pEPsL6U6g7t6+BmTsbqK3l2FzeqCrpoYoujW/:KBwfzSTM+qK12FqreaW/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Invoice.exe
Files
-
Invoice.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 607KB - Virtual size: 606KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ