Static task
static1
Behavioral task
behavioral1
Sample
updated invoice.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
updated invoice.exe
Resource
win10v2004-20231023-en
General
-
Target
145d5bda8ad8f9015489474e6b76380868fcec0f6942af2b4620ed30216c00d9
-
Size
592KB
-
MD5
962c1cb0340f2bd4a102329e4df7cdc7
-
SHA1
d6cd76ac8d35eb9b1e7fc63f4a08ad5840ba1037
-
SHA256
145d5bda8ad8f9015489474e6b76380868fcec0f6942af2b4620ed30216c00d9
-
SHA512
18ac1b006d06f29d3aa8ff15d932623136be434945d0fc1416b198da8c13bc790370b2e1f95b5ddee9c42c85866297db9e0d4f3c6d45b276ad7538c89de28d0c
-
SSDEEP
12288:w6IrhXABlRYC13c9RYESZNKvGByYjhnLcroScsh/3RR2FeyK91ry0yMJA:NIVwBlRTYhSZNMG0Yj9LcroBsBAKXy1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/updated invoice.exe
Files
-
145d5bda8ad8f9015489474e6b76380868fcec0f6942af2b4620ed30216c00d9.zip
-
updated invoice.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 637KB - Virtual size: 637KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ