invoice_#653[.]exe | Triage

Sharing

General

Target

invoice_#653.exe
Size

2.5MB
MD5

12674ab7ee6453ad21b117ba3854293d
SHA1

d7f710c160e785caab1d8d9125a05ac21f06e275
SHA256

71d80c8f2f09ef47ac57687801645fd3cbc1095a1d3792561aa8d2e4699a69b0
SHA512

7f4e74d43266cbc8e7fef4719a4ee7a44a703b781cd401b8dd663a563ea0be5760b91b356f622da75bfef4d11c3dc5e9d64593dd09409fddb53a832411a38106
SSDEEP

49152:+L1tS6o1woUyFuQCXw/gf0yA7Qbd+5XlMW2ahUKv8m4hcln+/FW:+PSihgO0yA775V6vrjclnT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
invoice_#653.exe

Files

invoice_#653.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ