Revise Invoice to Euro Currency[.]exe | Triage

Sharing

General

Target

Revise Invoice to Euro Currency.exe
Size

509KB
MD5

5e23555c91c7f95d876c082658f8b064
SHA1

48b6b9fb774ebc8dba9ceefcf628dbf491038de4
SHA256

244ca73815a8c8303d9738bf0dd0fb859736fc69ea5103329ba2f6be2f9637eb
SHA512

9e018a31932165da66d50ab03c4649955070d78402d4d4f6c6218262cca6b415a69eab95db6be9dec89953b90559991db793c8d6847dd75103be5347d4b5db8c
SSDEEP

12288:hRhOCFE4wfDpKj+G49niOTfwL4uGcwp+4i1:Hk4MDpKjw1iChcwp+4w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Revise Invoice to Euro Currency.exe

Files

Revise Invoice to Euro Currency.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 506KB - Virtual size: 506KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ