Profoma Invoice[.]zip

General

Target
Profoma Invoice.zip
Size 684KB
Sample250412-g29msayp14
SHA256 ce40179571be3f961e7004cb666a2acf92fc98bed3267ffcc7cd0f7a68dbbd66
MD5 7e547fbc00881f0a2a318c023533ff95
SHA1 77b8f0210c90e50b371f525c473e6e369831706a
SHA512 f450f0742c7f0da866c0c5136cef881233c0f8d50071fd4220ca6df4c33a8c6b167605ef9c3cc169734dfefa7e95ea9c63d65748fedae99324bcc8dcfef5b59c
SSDEEP 12288:NWKxCsPTul5L3NbdztADxGN84skVm9VaEMW3ORrFCZnep/8XixO41eI4yzhYc:NWKxkL3NbQDxGu4skVOlMW3O5gne9CiB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Profoma Invoice.exe

File Explorer

Profoma Invoice.zip

.zip 684KB
Profoma Invoice.exe

.exe 737KB

Profoma Invoice.zip

SHA256 ce40179571be3f961e7004cb666a2acf92fc98bed3267ffcc7cd0f7a68dbbd66
MD5 7e547fbc00881f0a2a318c023533ff95
SHA1 77b8f0210c90e50b371f525c473e6e369831706a
SHA512 f450f0742c7f0da866c0c5136cef881233c0f8d50071fd4220ca6df4c33a8c6b167605ef9c3cc169734dfefa7e95ea9c63d65748fedae99324bcc8dcfef5b59c
SSDEEP 12288:NWKxCsPTul5L3NbdztADxGN84skVm9VaEMW3ORrFCZnep/8XixO41eI4yzhYc:NWKxkL3NbQDxGu4skVOlMW3O5gne9CiB
MD5 SHA1 SHA512 SSDEEP

Profoma Invoice.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 a9d818bc38d2a84ff40e54a062a9fba01a0648300fb1a892432547bc5b85e158
MD5 a7b0a2d31c9d230e5cd425ef80a7c126
SHA1 f2036f08234228181c1fc5de37eb96ce2d3d521a
SHA512 70859e8be68ead1eb4f63f6e5705a80c18744f98f71f2662df68e16281c3353437e8224fea7f9d52ed794c3b804fea7c2f1e081615afda661fea45ba66068e84
SSDEEP 12288:eIiKV/9THVDUzYl7LRNbd7tA/ZI/8p6Rh1lVaE4W3OrrfCZxeF/IT4xy811lmyD+:eYbLRNbc/ZIUqh1Dl4W3SbgxeJG4x71c
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

759706

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Profoma Invoice.zip

Profoma Invoice.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Profoma Invoice.zip

Profoma Invoice.exe

mscoree

dotnet