Static task
static1
Behavioral task
behavioral1
Sample
PROFORMA INVOICE IMG30003222466 EXPO SCAN_pdf.exe
Resource
win10v2004-20240508-en
General
-
Target
PROFORMA INVOICE IMG30003222466 EXPO SCAN_pdf.exe
-
Size
599KB
-
MD5
d1f104fa71a71fb996bfdb6900e3121b
-
SHA1
d1ca9a6b5ab50638d6df628e0f33bc350877f9db
-
SHA256
f5d6baba3e22c289cec89d787a0adaa91af7a92d283ad01b8d3e9c54f9e75a9d
-
SHA512
6e7d82488cae216a554584ca95ad12b578e1b4dd8577768fec7e16c2e181100df48a00446a8d6ad6d61bb22a1a429d2a36b92297b33a5d33711cd3f092a0fb5b
-
SSDEEP
6144:HTpdG7QNLI+7zJET9dVQSqfPOB8c0BqGFO2QdzKDw:HNdXI+7zJEpnJqfPC8nBtGdzK8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PROFORMA INVOICE IMG30003222466 EXPO SCAN_pdf.exe
Files
-
PROFORMA INVOICE IMG30003222466 EXPO SCAN_pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 439KB - Virtual size: 439KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ