Static task
static1
Behavioral task
behavioral1
Sample
Proforma Invoice and purchase order-pdf.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Proforma Invoice and purchase order-pdf.exe
Resource
win10v2004-20231025-en
General
-
Target
Proforma Invoice and purchase order-pdf.exe
-
Size
633KB
-
MD5
648fa3c8019d055728427f0832d9bb6e
-
SHA1
45e878f6d2e74db7a9aabb6e5cd349e1dea4b42d
-
SHA256
721e672c1338a7ce26a580cd1dd0fa24ad4af079ce7412777a88eb85e410c5a2
-
SHA512
a4b55b2b1207efffeadd671e62a61edeeb6019bf01b766d24198f1923196c6bc608b3dd16df314a3ab540af24dadd66b3dd3ff2ebd226c4cae560bad4768cb90
-
SSDEEP
12288:xBWDYPwdz9NUbV/AeWkiVKgaPqXZE3/kWOk24vBD/RD/HMnqX2X:2z19KAedXqXZokWOtGBNfMnf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Proforma Invoice and purchase order-pdf.exe
Files
-
Proforma Invoice and purchase order-pdf.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 613KB - Virtual size: 613KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ