Static task
static1
Behavioral task
behavioral1
Sample
Authorized Docsx-1011279_pdf.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Authorized Docsx-1011279_pdf.exe
Resource
win10v2004-20220414-en
General
-
Target
9a73ca0ac130eedbcd7e9ff4d9a07bef45722fe49ef873da039ab00ad126e55e
-
Size
559KB
-
MD5
1ad8adaec9a7fad7dc4fe9d4b3e90420
-
SHA1
92924a3fb995815d3e9629cb81cc171ee319419b
-
SHA256
9a73ca0ac130eedbcd7e9ff4d9a07bef45722fe49ef873da039ab00ad126e55e
-
SHA512
4cbb0806e84d3b145b3f6510cfa514ba9faa72207b2170b6e28257b3212d404f973ebc96d4c47fb937e77a774e42145a703eb43bd555d539c33f333116a12e67
-
SSDEEP
12288:SBo9e243AVsEHMGqan3LKDCXeEMSi6I533GCgmU5bclWSmJ0QXwb:SO8wVTHBqw3KCXeEMSiX5nGrmU51j0Qw
Malware Config
Signatures
Files
-
9a73ca0ac130eedbcd7e9ff4d9a07bef45722fe49ef873da039ab00ad126e55e.zip
-
Authorized Docsx-1011279_pdf.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 580KB - Virtual size: 579KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ