Invoice_5480394988_5480394682[.]exe | Triage

Sharing

General

Target

Invoice_5480394988_5480394682.exe
Size

618KB
MD5

ef83aecc2603e9cbf458c502bff0655c
SHA1

b847e6b115ce83f0622e0d4e1f370b8f42da2f80
SHA256

2b486ce27109e1922e7b1623b94178813248820c46b8cee889af078ae9f4ba54
SHA512

7d3bedc4e1af1e2db66fd5e7dba46247e11c172eb3bb4d5ae914ce68d85f6b9b7bba1980301209725f375a7a23b825422ba64f055104ec1085470e70063310e0
SSDEEP

12288:upEmQepZMSTtH4jbP6stFRklnzTUt0hjMyOH5z9meo8mVzLcsmMaZK:upECtH4v6yGzrInR9wfzldR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Invoice_5480394988_5480394682.exe

Files

Invoice_5480394988_5480394682.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 614KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ