Static task
static1
Behavioral task
behavioral1
Sample
MEK Inspection Invoice PPSL doc.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
MEK Inspection Invoice PPSL doc.exe
Resource
win10v2004-20231020-en
General
-
Target
c76653bbca07ab7f4a4d27003a52bb9e556962ca6db90efd0be21a9398245016
-
Size
1.2MB
-
MD5
9d17399d5eb8f16cec9f917ff8cbbedd
-
SHA1
fc6d12406e80804faab8bebfb2cb51e21822ac71
-
SHA256
c76653bbca07ab7f4a4d27003a52bb9e556962ca6db90efd0be21a9398245016
-
SHA512
08f2218f68f9e88658ce49f91d576a4e55071cf395b59032e21a4af704e354d5ff2a480dc7bd1d53e2ac1791f6680b092d68545666fc39532f4227cae6390231
-
SSDEEP
24576:Y2V5YW7wV51St+3u7c+MNTOPBnrGkyhYI8pM8jTwWedU+Va+bJxeJ8S2:Y2V5T7wV51r+7c+MNaPBykx7BTwWeO+r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MEK Inspection Invoice PPSL doc.exe
Files
-
c76653bbca07ab7f4a4d27003a52bb9e556962ca6db90efd0be21a9398245016.zip
-
MEK Inspection Invoice PPSL doc.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ