Static task
static1
Behavioral task
behavioral1
Sample
invi.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
invi.exe
Resource
win10v2004-20231020-en
General
-
Target
invi.exe
-
Size
272KB
-
MD5
97f5b24ca6ef0a8769ee2c55e98806b4
-
SHA1
068622513f2ae97f5f0ac2d333900045a7e01062
-
SHA256
4312c7f12ac9c648b395c16ddba44f2aab08e47054707a5af5f19ad486072843
-
SHA512
1d843a166584d578f99f8a6c8c2775a551a5f08f5070e1a2e29be11575e4d4d99c6f171513d81d390c61147316baeef09ab47c37d3ed082188e40893d4deef40
-
SSDEEP
6144:ekZt0FXSr6fiXCid450ZQ8riRoLd2uv0KyR:emt0GXCidHySdbHg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource invi.exe
Files
-
invi.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ