Invoice copy[.]pdf[.]r00

General

Target
Invoice copy.pdf.r00
Size 588KB
Sample240418-hp67kaea67
SHA256 f3298ef809962d972156b31709e10d4af7ab11c9ea3e2ce3412f052bf9784d26
MD5 edf46e0240a7993d532633a83af664b6
SHA1 653317c37f159144151288716af4a4702eb041f9
SHA512 53c5bd21291de66ff0a534ef5676ea4998f0ba72c57fc7c3f0efde5eaf14f7554daed0e3371a5e7f474ccdc5ac38e0f405d9c16433976260f1b083ca914740b3
SSDEEP 12288:FL9IVWGjXFZEIa7FtDlIBKL0vzQ7EmCzC28H0hEuAOTIG8HYaPDBEw17Z:FLWVW4fEt5tDl1LZRCzC28WpHEGUJlEY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Invoice copy.pdf.exe

File Explorer

Invoice copy.pdf.r00

.rar 588KB
Invoice copy.pdf.exe

.exe 608KB

Invoice copy.pdf.r00

SHA256 f3298ef809962d972156b31709e10d4af7ab11c9ea3e2ce3412f052bf9784d26
MD5 edf46e0240a7993d532633a83af664b6
SHA1 653317c37f159144151288716af4a4702eb041f9
SHA512 53c5bd21291de66ff0a534ef5676ea4998f0ba72c57fc7c3f0efde5eaf14f7554daed0e3371a5e7f474ccdc5ac38e0f405d9c16433976260f1b083ca914740b3
SSDEEP 12288:FL9IVWGjXFZEIa7FtDlIBKL0vzQ7EmCzC28H0hEuAOTIG8HYaPDBEw17Z:FLWVW4fEt5tDl1LZRCzC28WpHEGUJlEY
MD5 SHA1 SHA512 SSDEEP

Invoice copy.pdf.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 37fd7b8035bd49b8dfad405a793428dda8cbf623de0133818756d05a1191d8b7
MD5 49e038fcffc683c025060ca5610e0ad3
SHA1 20007286f125b0f2dbd097000c1c3cd014372d1e
SHA512 18656778b3924b0eb02547d32bbf8949cda4b7734b2c94f95a1117f75bdc526d58bdec344bcfeff94ba14cfbe6bd2fa919288eecccb0d1d62d0b54a16384926f
SSDEEP 12288:7WkV9mUBhIooC3jjSc6bun4f8vNN3JRSA/DGzf9JEMWI:7WkV9mGuqzjSc6bkzN5RL/Ub9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

621438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Invoice copy.pdf.r00

Invoice copy.pdf.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Invoice copy.pdf.r00

Invoice copy.pdf.exe

mscoree

dotnet