Static task
static1
Behavioral task
behavioral1
Sample
Invoice.GT872905.pdf.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Invoice.GT872905.pdf.exe
Resource
win10v2004-20241007-en
General
-
Target
71c201e4bb8fff8803cbaac71239666e.bin
-
Size
184KB
-
MD5
2790389d2fb9a06ee540010910d419e6
-
SHA1
8a08ad84e25a4ca0d9783202f02ea1107066bf32
-
SHA256
19b7bde655e1af20d94ef0419a907d5f96d70388336c6c35837b7713bf690d70
-
SHA512
8bd3157a5ca73eb9b9930aa040509df4a71fc03fb1abe9d9f5638e061c25c277ea005dd8676e41a333aa06af6b213494519057804bda06bd6c15d2635305c9f4
-
SSDEEP
3072:69Z0oMx7EVhnkSGBbzi25lir7/Ln3VIBzrvkCQUIeYcsDRIreREO4qiU+O1Fx6DK:SZ0rMkSEbF5yveZoLncsD6kEhu1aG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Invoice.GT872905.pdf.exe
Files
-
71c201e4bb8fff8803cbaac71239666e.bin.zip
Password: infected
-
8a29397afb6adfd188034cd2307bc1cae40d04f0c33ce0c170539ecc030b59cb.img.iso
Password: infected
-
Invoice.GT872905.pdf.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 411KB - Virtual size: 411KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ