Static task
static1
Behavioral task
behavioral1
Sample
Invoice # 2357.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Invoice # 2357.exe
Resource
win10v2004-20240419-en
General
-
Target
Invoice # 2357.exe
-
Size
573KB
-
MD5
100db370d21c6125afd6d3358d100860
-
SHA1
cb7a55063bcad757c98db289720b79cc127e8c55
-
SHA256
60cec2b7e0df1c0b13e6b636ae979b2e6abb5e567a62326bf36c73c84a348636
-
SHA512
a9ea18c130358aae6d5516f765a09c1325a25237ab27aff1656b2e774aa81506e0d397190b3a9456c77e638da630ddd0618e6f56c68531ccbe9b3b3dd1213669
-
SSDEEP
12288:lfKDRvpATCjwb5PpJYuFAVM8YyoCP7r9r/+ppppppppppppppppppppppppppppd:EbATvRpJT8YZC1q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Invoice # 2357.exe
Files
-
Invoice # 2357.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ