Static task
static1
Behavioral task
behavioral1
Sample
NINGBO-Invoices-Past Due.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
NINGBO-Invoices-Past Due.exe
Resource
win10v2004-20240802-en
General
-
Target
NINGBO-Invoices-Past Due.exe
-
Size
792KB
-
MD5
59af4b51a77cf22f3ddb875a8d4b844c
-
SHA1
29b90404957574ab24011e3cd6e256c1da5cc839
-
SHA256
e660bca6f7d3dfaa03b89b3b172b872c5f2f884a296a4205dd2d37fa71c026e3
-
SHA512
b01eccf809fc4b46858e1b1431b8db68e38fe30c2f6d37ddfb793411323490e8c2a26e0dd451a07e91a4eab2c5d65fec73f31bf07c983d83fbd44976cd615703
-
SSDEEP
12288:C/Scf38wYuotle9xDhk/erznafKW6p3EgS9eqk/Kiz/sg3pn11Uww:CdFIeHFlGfHoKioMHUw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NINGBO-Invoices-Past Due.exe
Files
-
NINGBO-Invoices-Past Due.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 790KB - Virtual size: 789KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ