Static task
static1
Behavioral task
behavioral1
Sample
Invoice no 237296.pdf__________________________________________________________________________________________.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Invoice no 237296.pdf__________________________________________________________________________________________.exe
Resource
win10v2004-20231023-en
General
-
Target
Invoice no 237296.pdf__________________________________________________________________________________________.rar
-
Size
733KB
-
MD5
c4538c1cafbaf427f5a42ea86fdf9881
-
SHA1
89f365048564c956758239171f4e3b49067f43af
-
SHA256
f4c0ea947988b04112ec98ed8f3e38aaf5cab4ec72328e890e1a885f14b4ebc3
-
SHA512
f0e80c57eab17e913d83ca67a252a0eaa28948c0f9c04c0804ec39a1bcaeceaa348af4aaba8e69aa8c39a0e4aee4905e4c47926f86d2c28f31126242831b7c7c
-
SSDEEP
12288:55AGlqU2Q7HZuKDQBpG16SDFSfLQOQSX2ctEfgAMQZj02IxkN/ke:5eG4OrHDQBpG0SDFSjQNJcifgA9Z02IE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Invoice no 237296.pdf__________________________________________________________________________________________.exe
Files
-
Invoice no 237296.pdf__________________________________________________________________________________________.rar.rar
-
Invoice no 237296.pdf__________________________________________________________________________________________.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 620KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ