invoice739[.]exe | Triage

Sharing

General

Target

invoice739.exe
Size

833KB
MD5

cd2719066dc301f9cd5dcbfbf5323508
SHA1

44d580125ff889fa9e8cd169138e72979554497a
SHA256

94fbf90615b1baf84da26854c9c7b72115eaa12eb8392d898c7689f433980120
SHA512

35e8d8bd070e03ea1c611b85b45800364dd507636a60f37d3282ba55a85af4b5208b9c294c099d72994ad7938b20b8650735a64736a6967e94b376d986ab639e
SSDEEP

24576:3UMoO0sPUYPWt8WhEImRj/q6T6Sfglb/:3UBX8sB+jxC6T6SYlb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
invoice739.exe

Files

invoice739.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

tzyR.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 830KB - Virtual size: 830KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ