Static task
static1
Behavioral task
behavioral1
Sample
Invoice Packing List.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Invoice Packing List.exe
Resource
win10v2004-20240426-en
General
-
Target
Invoice Packing List.exe
-
Size
330KB
-
MD5
dd9e9a848de948633aac9142f8fa88f9
-
SHA1
80639a7c19047482c3fb91710bc6492c83a84259
-
SHA256
1f792bfc8052ad05d9cdfa10c9d511ec7cde8ee29bb2201771a742136f3633ed
-
SHA512
4b62d08a05369fa6adf8829cab55dd9b3144314d0958fa25f75a4cc4033368ce09c4f20d5a113752a6e838488873d809a7a3a78888f72322aebd85d2b6b4a694
-
SSDEEP
6144:D/+Q/cfzJ9HDWjYIqyK/SFl/rWSZtrYhZO+d2IdcYj:D/+Q6rjOYrSvvZSh9LRj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Invoice Packing List.exe
Files
-
Invoice Packing List.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 328KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ