Draft Invoice[.]zip

General

Target
Draft Invoice.zip
Size 620KB
Sample240413-tbmfsaef44
SHA256 72fdee6bbb20fd83e38e2d73518e2deeddb1fdf687a801703ba0b2b2f0b0475d
MD5 d57519bb71f560e9b4fbdcb9848e1f55
SHA1 76f7e6a3c7b5f2e76184003a7cf3ae89d708f5ec
SHA512 8e20428fa6923f91a0c0eb078d09323be8e8e2b106520f3a5a230bc49b7bb6bc369080a9559b9a40f74b77c0d722070e2e199d5a538b0a29b09b209346ea9758
SSDEEP 12288:Gf2vLPtxcB7KMB/wN18mjdekAdESp12lPCSLAshynKB:Gf27YB7KrNrEkCnp12lqSDxB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Draft Invoice.exe

File Explorer

Draft Invoice.zip

.zip 620KB
Draft Invoice.exe

.exe 630KB

Draft Invoice.zip

SHA256 72fdee6bbb20fd83e38e2d73518e2deeddb1fdf687a801703ba0b2b2f0b0475d
MD5 d57519bb71f560e9b4fbdcb9848e1f55
SHA1 76f7e6a3c7b5f2e76184003a7cf3ae89d708f5ec
SHA512 8e20428fa6923f91a0c0eb078d09323be8e8e2b106520f3a5a230bc49b7bb6bc369080a9559b9a40f74b77c0d722070e2e199d5a538b0a29b09b209346ea9758
SSDEEP 12288:Gf2vLPtxcB7KMB/wN18mjdekAdESp12lPCSLAshynKB:Gf27YB7KrNrEkCnp12lqSDxB
MD5 SHA1 SHA512 SSDEEP

Draft Invoice.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 615f457d36ad1da20bd802ff15975732d9ebe71f5b4d540ef19c5ca3135fd863
MD5 eb0f59239e7511ffa5ad81468163ad68
SHA1 70529b6039cc5ea7346bd055519d2f6eb2136ed6
SHA512 bb4f641f469277a512563c37af1a21286322b225b06e867a6ede93b49f33a155a2362a7a3d1c3f9470506702aa919bffbdf6b82a93b12e17a723a8b08fdf401d
SSDEEP 12288:Skvq31eoWKzKRXwMf/MNbTym7deYAedEWp1+lP6SdxjjFGY:SeqFmRXwFNvH8YjJp1+lySnjp
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

650930

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

IsfT.pdb

Draft Invoice.zip

Draft Invoice.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Draft Invoice.zip

Draft Invoice.exe

mscoree

dotnet