Static task
static1
Behavioral task
behavioral1
Sample
Ningbo - Past Due Invoices.scr
Resource
win7-20240903-en
General
-
Target
a661b9a788590a65cbc7156fc775e035361f7481f927165e583efb1ccb483cc4.7z
-
Size
716KB
-
MD5
e2606c778d582aa42a9715365f7b5fad
-
SHA1
8b71d4bf2d2e440362a0d16cade5cab653119260
-
SHA256
a661b9a788590a65cbc7156fc775e035361f7481f927165e583efb1ccb483cc4
-
SHA512
50e23dfecbcc3c4da8273cd7df209380e3f75e65e5ef4ae00bb7bfab36f4f771d9aa5b6ec681081c91ee82c2e14e6288f259ffc1f6c7bc6887c61dce95b0e581
-
SSDEEP
12288:dQzlzmhfPl7sG3oHvKirPwl63H9qB359ST6etQge/tt8gnYyqBXG6fe9BAF2VtOx:dQNG3oHZElWzT6GQgitt8e1KDF2VtB/e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Ningbo - Past Due Invoices.scr
Files
-
a661b9a788590a65cbc7156fc775e035361f7481f927165e583efb1ccb483cc4.7z.7z
-
Ningbo - Past Due Invoices.scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 817KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ