Static task
static1
Behavioral task
behavioral1
Sample
INVOICE #901825.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
INVOICE #901825.exe
Resource
win10v2004-20231023-en
General
-
Target
INVOICE #901825.tar.001.tar
-
Size
620KB
-
MD5
5e178645f7fd1e2c191d6adeb89672b4
-
SHA1
8e272f3a8bcbf9102d57671ae032212d097dc6d5
-
SHA256
6f9bcef8505298963820ffbc240d87db1674d1fdf1165d93728480025970dc2f
-
SHA512
b73ee581a520551d83526d18c927cc03bbf4ac6019ccfe18655bc2fcd6195a36e6ddfa33336fadad709b2d72512451db9a2f2e51cb1d1d779cf1ceeb93032e50
-
SSDEEP
12288:KZT2DuNaUYfpFez1baF9+z9IwJuSSD2EjedGyYi2+ija4K:KeyaUm3Om/+z6wJAD2EUG/i8y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/INVOICE #901825.exe
Files
-
INVOICE #901825.tar.001.tar.tar
-
INVOICE #901825.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 602KB - Virtual size: 602KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ