SignedInvoice[.]exe | Triage

Sharing

General

Target

SignedInvoice.exe
Size

766KB
MD5

35a8b284b170cd75cd1d7db7fabd7dfd
SHA1

fb016ba3030e9aff80022c08a9674ba99a1efffd
SHA256

a5ec9721b976b5b2b9b212d0dd05313a95460c0cf685d9156e51962bcab76164
SHA512

f82f59923c5e9af9d3c6f165d866b840be2daa7fd17c93f569de67d3f46af4a66ea55ef4bbc3c411a78be84d728c1d87c302769bf95eb081372ecd91aa32d246
SSDEEP

12288:mMr8IX5dYeXY/e1crO8ZvULHKtSj0LkUATqs3vK7rgaDFXjMAH4s786Ztt5nvwhX:mMrbpR6JGLwSjckZTqyvKAaDF/HH7FX8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SignedInvoice.exe

Files

SignedInvoice.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 759KB - Virtual size: 759KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ