Static task
static1
Behavioral task
behavioral1
Sample
PRO FORMA INVOICE - - ZHOCITZSN (14-Nov-23)/PRO FORMA INVOICE - - ZHOCITZSN (14-Nov-23).exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
PRO FORMA INVOICE - - ZHOCITZSN (14-Nov-23)/PRO FORMA INVOICE - - ZHOCITZSN (14-Nov-23).exe
Resource
win10v2004-20231025-en
General
-
Target
14112023_2018_13112023_PRO FORMA INVOICE - - ZHOCITZSN (14-Nov-23).7z
-
Size
604KB
-
MD5
812aaeb8b84a37aec2bb5e6e7159e072
-
SHA1
97205ad2ccc9590c78193b3d4a67b56fa30e4a7f
-
SHA256
974d3062907a02e60f4d52ba32aebf04f19f12bc9a718ce34ca9dc8f33e24306
-
SHA512
37af538b7c77ac381ca76a508473113a06d9daf942c4b3624904b3c3316ec14c9d0f7317064e513c427951725a91c865dca5fccee560ba86ef992ad85c9444ba
-
SSDEEP
12288:1LjEBTs6tB4ir/4Dx9Qvtdnbfee1AZpuy9874zQq+165lsmkIXWTCIE6:VABTser/+x9Qvt5112puXGfyTq6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PRO FORMA INVOICE - - ZHOCITZSN (14-Nov-23)/PRO FORMA INVOICE - - ZHOCITZSN (14-Nov-23).exe
Files
-
14112023_2018_13112023_PRO FORMA INVOICE - - ZHOCITZSN (14-Nov-23).7z.rar
Password: infected
-
PRO FORMA INVOICE - - ZHOCITZSN (14-Nov-23)/PRO FORMA INVOICE - - ZHOCITZSN (14-Nov-23).exe.exe windows:4 windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 629KB - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ