Static task
static1
Behavioral task
behavioral1
Sample
PDF.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
PDF.exe
Resource
win10v2004-20220414-en
General
-
Target
aadc7a8cdcd35f536e33f5ec7607d61a5f8bba74ce1a3872bf7275bbc8620e09
-
Size
478KB
-
MD5
b5d427538819c371477697664e1b1a97
-
SHA1
ab6e85e0134ea903c8efe30d125d8c9c9ee0e0f3
-
SHA256
aadc7a8cdcd35f536e33f5ec7607d61a5f8bba74ce1a3872bf7275bbc8620e09
-
SHA512
859a05d84b62501c5bdd52a3c604690a8a5e0daba77fbb0e2bd47ad21633578102a242f9aac2cbacf4a0b5ec98212a99d4544b90d4c626ffbb51ad4ded2e345c
-
SSDEEP
12288:HGRcaKoeXfiG83rptfUDPeTJHcJJtoOA+S:HGRcvXfR83rPJ8S
Malware Config
Signatures
Files
-
aadc7a8cdcd35f536e33f5ec7607d61a5f8bba74ce1a3872bf7275bbc8620e09.rar
-
PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 579KB - Virtual size: 578KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ