Static task
static1
Behavioral task
behavioral1
Sample
PROFORMA INVOICE.exe
Resource
win7-20240729-en
General
-
Target
19284564528.zip
-
Size
884KB
-
MD5
6899cd58a6f22f7f087f1126c4eb7745
-
SHA1
70885ca8e9605d87b6390e73935145e4d3224494
-
SHA256
88c5e6caa9880e682f748b55da70450279adf5d568bbf72a1522a39db199212f
-
SHA512
77907697000ca1a44e080f5f3ad47b57873c25d0ad127cce44daf1f54cff1578a817f667a391929e6a9ae53eee6e80b205c1d2bb8b7ac341cd85ed5068e47f87
-
SSDEEP
24576:2VMqJ88vJMJT1cPPcJdd0WoR4FUHwOfRaGtUBmzrVamwrnPKmHcK+cf:2VMqJ88vJMJ1H0U6HwOfAvErMLPKG1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/PROFORMA INVOICE.exe
Files
-
19284564528.zip.zip
Password: infected
-
ccdf54b8450d34d8c6a114598278a88b1807d6c5e447f45b746acc14193e773a.rar
Password: infected
-
PROFORMA INVOICE.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 971KB - Virtual size: 970KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ