22ecf2a5bcc0b22eb208a2dfa7a0c89a30e505bc03e838c490684ba9a1cbeb13 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22ecf2a5bcc0b22eb208a2dfa7a0c89a30e505bc03e838c490684ba9a1cbeb13
Size

843KB
MD5

3a77add5eda509c63b06bf920be5d67e
SHA1

01481f237153ad79308e6f3e7fc023e6ecfaa8ce
SHA256

22ecf2a5bcc0b22eb208a2dfa7a0c89a30e505bc03e838c490684ba9a1cbeb13
SHA512

dde486bf718be9027148a3d4e60d61b4b2c6ca9d8cac4ccb4962884e9c257f4ac418a6d5adad50ee2cb787354824f06de281b4d6d2748f5d06c5343623f45600
SSDEEP

24576:cvHZq23eT/ferMmvgNFL16eU1lzsqE6p3H5bQk3Z:cMVT+rHgNp16hLz1E6p3ZbQkp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Invoice -1424002368.exe

Files

22ecf2a5bcc0b22eb208a2dfa7a0c89a30e505bc03e838c490684ba9a1cbeb13
.zip
Invoice -1424002368.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 872KB - Virtual size: 872KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ