Past due invoice payment[.]rar | Triage

Sharing

General

Target

Past due invoice payment.rar
Size

616KB
MD5

05d068c87e0b4e9f8266d2c96f7d3e7e
SHA1

6cc090b276228d46d78027d8c1ad45f1e27813af
SHA256

b690d56612e3674b49a6b763f64548b6cc22c0c71196c6144516aed8841be4d6
SHA512

c2a5fef44129fd6aee809ec06fac53db4684892148b5470a0b9d403f7833d41c0703b429eed3105392b18e374bb9e4aee64a9a0ad2ce9ddad74ddf2a9bd6521f
SSDEEP

12288:qlILL0wJIrcuM/X+mjg/SOsuqQXH6twNSi4fJCJrdKe18VfzcrROB:GI0AIwuoiS+H6CSi4fJcdD14fzccB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/Past due invoice payment.exe

Files

Past due invoice payment.rar
.rar
Past due invoice payment.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 647KB - Virtual size: 646KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ