Invoice #765400[.]rar | Triage

Sharing

General

Target

Invoice #765400.rar
Size

664KB
MD5

fd56eba296bcac1351c1752f412c971d
SHA1

578dec0533b5c2f7450619b9372e0cb6702d238a
SHA256

ae4237ed1856e85fbb153facdf9aec4bbec7e4d32bd3f22628129b886fb44acb
SHA512

5650b9a38046c7d872e9c6d9f2e5be837844412928cd1627c9d4d053557764a567a1e7e169120338c8b919503d8259a6d401b54761a187e309d69e2500dc556f
SSDEEP

12288:AMURXc5wGk0RiycbyCtjuqsdCF4Qg3QI3gBrqSCPwQDAhqY45qqtI1wThMq3wXy+:AMUtciGzcbbtjuzIF4QgQjZqdPwQDAw4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Invoice #765400.exe

Files

Invoice #765400.rar
.rar
Invoice #765400.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ