Static task
static1
Behavioral task
behavioral1
Sample
Overdue Invoice.exe
Resource
win7-20231023-en
General
-
Target
Overdue Invoice.exe
-
Size
871KB
-
MD5
22a11804e844c2851a18c4e017d152e9
-
SHA1
7ed09a8b7f3b2260c4829487084d170be22448e1
-
SHA256
91f81f3d3088bfc25707998c18c1bd4e5c0f8cabf8cc499e1d16ef140f02468d
-
SHA512
6c4c418f7e8538f6c6fb3dd493b544150b2e7c3921f92b65b4c0ce543b21446f6dc12b81a909c3ab600a35aae82bac5d0872d6d4b0d72ee1136d5df7f2af3bfe
-
SSDEEP
24576:Io8hs62zPmIpC6R/GZip2VkV66w++Z9XBUzIo:b8hdUu6tqYQkV66wPXgb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Overdue Invoice.exe
Files
-
Overdue Invoice.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 858KB - Virtual size: 857KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ