INVOICE 327762[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

INVOICE 327762.zip
Size

533KB
MD5

4b1269989d8277505e63abec1b5d43b4
SHA1

8ee74711bad05d6a49da15ab4393b6c0c273c8f1
SHA256

2e37cff1da0032c8316841d8f7f14c6f6243bcb2d2d6179f79023cf2d71a6b59
SHA512

83f1f749071efb6f46a45ee28ae5ce91778e79d6fdf3cdc448fd20eb3d4096298665df51b4692adb754a841d3ed78114759311515b14bf22f84768199ff642cd
SSDEEP

12288:W4zlYsu9zdaCdgzaiG3/E7q1xq6QuIRwQQ7bKiPrfZu/JTuL:56sazdae6byE7q1xq5fwQOjhuBTg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/INVOICE 327762.exe

Files

INVOICE 327762.zip
.zip
INVOICE 327762.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 554KB - Virtual size: 553KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ