Static task
static1
Behavioral task
behavioral1
Sample
INV202457684.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
INV202457684.exe
Resource
win10v2004-20240508-en
General
-
Target
49278f5d1c5e463543d33349764cae048f4b53faaac236c42a6231a504d508df
-
Size
589KB
-
MD5
4c31b6aabff5381faaa492497ba8b224
-
SHA1
5a60bbba47b068c9f49bb357b63df13d78e93f92
-
SHA256
49278f5d1c5e463543d33349764cae048f4b53faaac236c42a6231a504d508df
-
SHA512
8a1c85474c6b1ab8f0ac9fd9baff6ebd4f3a05d4bb0272b1db32776a5f21545bb675e921b00286826daa7e46f63ebb95dfb7db054c676df6c0baac0718c485ec
-
SSDEEP
12288:v5ls0h57/2vp4HHOaQr4k6gSpa35gIe+AI8EJgbCJZ:vbbZHHjuIate+AIzB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/INV202457684.exe
Files
-
49278f5d1c5e463543d33349764cae048f4b53faaac236c42a6231a504d508df.zip
-
INV202457684.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ