Invoice #80752[.]iso | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Invoice #80752.iso
Size

1.2MB
MD5

17bffcf4977b5e91a0efc2ba789d3d36
SHA1

b3a68d52a449a5919cf5384387db872d1cee66d5
SHA256

bb4794860f17f652969abd41bb016a240b1ec4ee0c60fa4968f7759d2a35fce1
SHA512

df5f5217441bf2d418a9971bcdde74d4849e5ef33a88d21a04c6f67a52e74b53af06ac105bd53023c5fcba6219bbe1d3d152d2738082a1b4cde4d88e04bdce00
SSDEEP

6144:hDmad57XePl3DvJxWcvJJaSQlUIYkmhol6GSKpWfZiLcTHhs2R0nmw6iBY:hKVDW5Uhkh6Gsfmssis68Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/INVOICE_.EXE

Files

Invoice #80752.iso
.iso
INVOICE_.EXE
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 357KB - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ