Static task
static1
Behavioral task
behavioral1
Sample
Invoice Confirmation.exe
Resource
win7-20240903-en
General
-
Target
905d39fb9da393f7f2127d11e60860e6faa3aeed8dcaff56f2d8fa09c9a04902
-
Size
1.5MB
-
MD5
154cea95b1314884e0f13970b14ee3a0
-
SHA1
d83cbd17b513dafbc13e409f045a203783126089
-
SHA256
905d39fb9da393f7f2127d11e60860e6faa3aeed8dcaff56f2d8fa09c9a04902
-
SHA512
8a5637060c0d6c6b3f06bdc9884acc4225f5b064f1c942c13a070bf05feae7429c6cd13136200f5554536475f55c76022867cc142764f7b928fb5c3c4fe78752
-
SSDEEP
12288:o7M3VrW5dVFDb8E6nf2SfSEcDiaQfzWhAWnrxcrCclWrzuGwVtB1L9:o7M3VsdVFfXEcCsNraDUfuGwP9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Invoice Confirmation.exe
Files
-
905d39fb9da393f7f2127d11e60860e6faa3aeed8dcaff56f2d8fa09c9a04902.zip
-
Invoice Confirmation.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 682KB - Virtual size: 681KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ