Static task
static1
Behavioral task
behavioral1
Sample
INVOICE3542-PDF.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
INVOICE3542-PDF.exe
Resource
win10v2004-20240508-en
General
-
Target
INVOICE3542-PDF.exe
-
Size
2.5MB
-
MD5
b26eb740a0b590c0c35a53034d3e272f
-
SHA1
46ec2ca5b3911ae71b56c542e3cdd04b49babf0e
-
SHA256
9b3ff68f6fab277586e4464332793f88d9056282df8dcf1aa4dabae58b3fdb3c
-
SHA512
4dfe552fee6c406b12d45fa0aaa0926d3e39cbb17955b104c1481ec7fc2ea07a10c6116d7899046139be6ba81b8d25933c8a607778fc5402c4ba85e2e4ff3ed5
-
SSDEEP
12288:h6M3ing1MhDAnmlziB2OfAMsXqNMWc+xMIvsqIRZsJ1XjLnEi8JEKLroYe:h6WingjVB2OfIq6WLxMM/YZUNfnrKG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource INVOICE3542-PDF.exe
Files
-
INVOICE3542-PDF.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ