Static task
static1
Behavioral task
behavioral1
Sample
Invoice_0167562.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Invoice_0167562.exe
Resource
win10v2004-20231215-en
General
-
Target
cb3b782f4ba56a4654f6018ffd709948.bin
-
Size
610KB
-
MD5
5a762a8cfd856a5ed3f97d8340e81a01
-
SHA1
047e260e91906e1eeaffa3555683b017e92bac1f
-
SHA256
127e5ff57224c9364b7c26dd8a82fb66b48e7b1ae42ebc76d850c0f4b4f51212
-
SHA512
eae0b148a3944288048a53e203c92554e6cc3814c8dd33b791469aa0fbbca3d46315cfd9c8f35821050ed564d10ccb6e34052c0016f21be280986c2c9e05ec73
-
SSDEEP
12288:NQdJpX0q/m+Lcc/R0URVWI1s5xLhNU37lpkxK8x5VB5py/nX3LR2C10KJnAk:eJl06h0UPqzm5uvBLyl2C1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Invoice_0167562.exe
Files
-
cb3b782f4ba56a4654f6018ffd709948.bin.zip
Password: infected
-
8752073d116d46b0e2aa2ffb4357edf52a9a47c6eb22336ba619e41e21474890.img.iso
Password: infected
-
Invoice_0167562.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 629KB - Virtual size: 629KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ