Static task
static1
Behavioral task
behavioral1
Sample
comandă de achiziție pdf.exe
Resource
win7-en-20211208
General
-
Target
comandă de achiziție pdf.exe
-
Size
409KB
-
MD5
6d1c90c44010cfd2f785c5d415a5cd18
-
SHA1
37a88f4f80b5e8e4345eefbbb9f2b23df08de18a
-
SHA256
3d28df7c5fa301b4e6d80f4bbc9dfa70bec762ca5ef085bcc8373b4b359b177f
-
SHA512
ace2fe025f112cf2bff848f5c6e8709b6db239d919d1b3ae0c63edcc2cdbe4ea941f7d2012e99d50ef80df36c36d630bc709ea8f59672416bffacbca6d09d32c
-
SSDEEP
6144:LD50VO+Q45IX8LhyTah2QFvuQp5D2oeGBtAzY6XXXtDMpgAHiW18sk/OIw:XWFWQp81gtOYkXNMgMifh2I
Malware Config
Signatures
Files
-
comandă de achiziție pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 406KB - Virtual size: 405KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ