Static task
static1
Behavioral task
behavioral1
Sample
Invoice and receipt.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Invoice and receipt.exe
Resource
win10v2004-20240412-en
General
-
Target
0bd27cf3e62297f2eda12a09cb28c272cabf470f791f278e24a77fdd0875d427
-
Size
710KB
-
MD5
c5dc0ae190a5607e76a735a0537f431e
-
SHA1
9d0226a1c0b17a28b31255797dfe19d4cfdcf1a9
-
SHA256
0bd27cf3e62297f2eda12a09cb28c272cabf470f791f278e24a77fdd0875d427
-
SHA512
26e5fc88120b03c8c2d1b10878c6fca6ed0ae9db12d69319375d504b9da484185a0bf10707589fce60e2b45bfa1b5738e2e31bfa19c61cc76379791934cb3caf
-
SSDEEP
12288:dOB94RHHvgvWJY72G4bvukW4x5jZZ4yIPl6F4Or3xn5s0o/lDWcPujRl9wqb:G94dPI7YbvukW4xHZ4Ub5s0GDhPg7/b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Invoice and receipt.exe
Files
-
0bd27cf3e62297f2eda12a09cb28c272cabf470f791f278e24a77fdd0875d427.zip
-
Invoice and receipt.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 698KB - Virtual size: 697KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ