Proforma Invoice[.]rar

General

Target
Proforma Invoice.rar
Size 643KB
Sample231026-nc5qvsch23
SHA256 69d687c40fc212cf5e617e6353ec91fc8056d23cc87a5c5cebea4daa9796f2f7
MD5 5ca0feda16de243d34928b893557659f
SHA1 b30076cf38d47aecea6575e64713451d4c998cc8
SHA512 8235889956e5c83ea3caf125353abe3cec53b661d42d833e53dd3164c9e6ea93dbee95e055942a7c5148a0a233de6dbd6820cae444795ec3d654d42ae8404fac
SSDEEP 12288:Zr1sjVGL5fwfaqE2oInAC/LQsHpPvqu/ce6WLnVQjMzBmKulbTZwsTKjZg6MsK:FvLZ72zACUmRvqUT5nlzgKul561glsK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Proforma Invoice.exe

File Explorer

Proforma Invoice.rar

.rar 643KB
Proforma Invoice.exe

.exe 735KB

Proforma Invoice.rar

SHA256 69d687c40fc212cf5e617e6353ec91fc8056d23cc87a5c5cebea4daa9796f2f7
MD5 5ca0feda16de243d34928b893557659f
SHA1 b30076cf38d47aecea6575e64713451d4c998cc8
SHA512 8235889956e5c83ea3caf125353abe3cec53b661d42d833e53dd3164c9e6ea93dbee95e055942a7c5148a0a233de6dbd6820cae444795ec3d654d42ae8404fac
SSDEEP 12288:Zr1sjVGL5fwfaqE2oInAC/LQsHpPvqu/ce6WLnVQjMzBmKulbTZwsTKjZg6MsK:FvLZ72zACUmRvqUT5nlzgKul561glsK
MD5 SHA1 SHA512 SSDEEP

Proforma Invoice.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 aec062a76f698f944b379f9ef7b38d6a08c93b048ac8b1849d8d8c22d1f76b76
MD5 fcb485c9d53c83cb17a6a8c5c88f0fc9
SHA1 4b8fe400148de44db0e529dacfed77f63d5b65b9
SHA512 14ec5f1e754a4b1b467e89baacd8ae9fdeb6afd8beafa4683ab72914466f866e28601bc5612572776bb91079b8b52d113a60679a3bc954e4d32a54bf5b3a3efa
SSDEEP 12288:U2ujsxTA6qDa8pLrHjBMdxoKy1uy1VmS15j:U8xs6pYLXBoOnVmS1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

758198

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Proforma Invoice.rar

Proforma Invoice.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Proforma Invoice.rar

Proforma Invoice.exe

mscoree

dotnet