Invoice0167562[.]exe | Triage

Sharing

General

Target

Invoice0167562.exe
Size

635KB
MD5

204ac6e77b42347b084cd3fc41850fc1
SHA1

fe84f5afeceb6b463eb4505f51d2d868bf20d330
SHA256

53b88a249d4c970ada7b688e9e44282aa3a36c44a4b170bd2988b5b53c8a224b
SHA512

c0e7d63bc3e6a66854e342eb222892a140bde52d4af646b9e1125f2de04b1d9f6e6e99ae04d15d334af09165246e8bc7da11b728b55bf36acdf06a94d9fedbaa
SSDEEP

12288:rK6momWOHSR+MSaaICgYeem6OvbVXgX/8hHVbzvzg0WOvnbp9:Db/BR+Mtz0m6QVX0Y1U0/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Invoice0167562.exe

Files

Invoice0167562.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

RWyH.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 629KB - Virtual size: 629KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ