12122023_2348_Invoice_32445[.]png [.]pif | Triage

Sharing

General

Target

12122023_2348_Invoice_32445.png .pif
Size

1.4MB
MD5

e78392d80ae8d479a9900e95750668f2
SHA1

51933736ca5b6e0ce61ad3153370f6c0ff4e9497
SHA256

022a045a5254680d5b2ad21f7a7e91a5a4c7a11eb5bc41a3b878b21680bcb7c4
SHA512

a143d2981518cd98109d1a9c6d5106b1c23504426224d1535cdfcd4dfbf1eb8caa5ad5d5139b4418714fa3cb830b7db1788db8fe477f2087d96ad5af62c0df1a
SSDEEP

24576:YlPf8kMO7O7eZ3bXfkGSZr/QTopkgxKJYiT5wQaV:YJHueZ3bnSZr/QTukKiT5Xa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
12122023_2348_Invoice_32445.png .pif

Files

12122023_2348_Invoice_32445.png .pif
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 341KB - Virtual size: 341KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 952KB - Virtual size: 952KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ