Static task
static1
Behavioral task
behavioral1
Sample
E-Invoice No 11073490.exe
Resource
win7-20241010-en
General
-
Target
cebd1ec9af2345988d14f863738d097c2eb16096bb688acb89bd4167f702d9a6
-
Size
411KB
-
MD5
b31de196e84192af6805c78bbe8cf5f2
-
SHA1
749c43d3dceba54c729650f515657451bec56bc5
-
SHA256
cebd1ec9af2345988d14f863738d097c2eb16096bb688acb89bd4167f702d9a6
-
SHA512
b078f681a56edd33864b92862ae4876ead31ed969406ef870f74809b1938cb8e983f8b72c99093c11ee69c09fa5c9b4624f1bbabc7ff409a20875aabdfc78ba0
-
SSDEEP
6144:gOlEIreTXA8lFCdG+nbiRzLsxj06W2096jsGpDnnD1dwq1EZ3yW/sCyI:1GKeM87Zw3W2096jDpDnnDOZi5I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/E-Invoice No 11073490.exe
Files
-
cebd1ec9af2345988d14f863738d097c2eb16096bb688acb89bd4167f702d9a6.zip
Password: infected
-
b22c9507d44a1f6c766718e8b91924fc1c57549854021a56476aa306c2944a1e.ace
-
out.ace.ace
-
E-Invoice No 11073490.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 622KB - Virtual size: 622KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ