aDox.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Total Invoices.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Total Invoices.exe
Resource
win10v2004-20240226-en
General
-
Target
Total Invoices.7z
-
Size
707KB
-
MD5
11fe7df03d81755d77e22853e843d4f4
-
SHA1
23dc63bf9fc9a92c300de638cd985d9142fd377a
-
SHA256
026d2e47c24fcbf324fb2985ebff0009597f811abdbf8cb85b366a5e8b720e39
-
SHA512
eb8932013e19dc8c735016b748dff1e8d02fa3aa1eaeddd778197acf55034b00bcae3f849649720548342ecd97ea6b6a27e51a825f36a5e7d964684cfe792eb2
-
SSDEEP
12288:F+NJ5NyLdVK7S5AfvpknVVENpXCuSE5KroOHDAyJQTf1v3CsAJ2jOwP/ggfdE67a:INMBg7S5uanGmvrZjOTf1vHAJ2jO4goE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/Total Invoices.exe
Files
-
Total Invoices.7z.7z
-
Total Invoices.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 641KB - Virtual size: 641KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ