Static task
static1
Behavioral task
behavioral1
Sample
New Orders- POB0.pdf.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
New Orders- POB0.pdf.exe
Resource
win10v2004-20220414-en
General
-
Target
65b7b3eb15b6563c277b66fedf41af12c9d3a1d909d41943089b8282103299ce
-
Size
599KB
-
MD5
c98ccca578fb30b3edf2d894caeac533
-
SHA1
8f5243116fb361e04f7d7c84aac53a88babbc1b1
-
SHA256
65b7b3eb15b6563c277b66fedf41af12c9d3a1d909d41943089b8282103299ce
-
SHA512
92a72cc4292fe2c043755ee865f3078e47315219fc79892d027cc72d3a1d593c7201f943b6f58901a799a650ba9afd2342674e3efd1d1c352dfab92108ec9549
-
SSDEEP
12288:Yv/14dzOb+W0VUrQW0/zRfgZgcFO8nuwyb8I7KDMCeOAR1wFB9Nq:KGtOT0VU30/lIiccOuwyb8kKDMCeOM1n
Malware Config
Signatures
Files
-
65b7b3eb15b6563c277b66fedf41af12c9d3a1d909d41943089b8282103299ce.7z
-
New Orders- POB0.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 532KB - Virtual size: 531KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 250KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ