Static task
static1
Behavioral task
behavioral1
Sample
Invoice-1150.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Invoice-1150.exe
Resource
win10v2004-20241007-en
General
-
Target
Invoice-1150.exe.v
-
Size
768KB
-
MD5
ef31d9a0edb030c28669b85712413cb1
-
SHA1
59e9c21a4babd9269fbb72046fb448ba66d16729
-
SHA256
20bd37d1bc1d656f678d99c15df2610cb2e2f9c4e0b294e504e8508be4c2f658
-
SHA512
cd051d17fc75ecfa8ba6fcfb6307f70879ee26c29af2bd99507e143956fc0ec510fb3a5b3b22bfbef1c959d0dfab18ee1b5b009dacc4e8768e8bcd9781526ab6
-
SSDEEP
12288:pqcA1fy1MqCNbvYt4P4Id76TXpDyLi9RqGUGgPKAQj9BM1FPgw+q28xH1xV3KdEP:+5PNbg4h2T5OqqGWKZM1tpH57Va2m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Invoice-1150.exe.v
Files
-
Invoice-1150.exe.v.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 763KB - Virtual size: 763KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ