Static task
static1
Behavioral task
behavioral1
Sample
Proforma Haziran 21052020,pdf.exe
Resource
win7-20220414-en
General
-
Target
91b4c720f1aab6ec16c72f685e984b0342876ee5e09b593b4bcc6ad2461fd560
-
Size
456KB
-
MD5
9c66c449f255e8e3f5f73c88576d80b1
-
SHA1
7e44cd8ecf422d63b659d3a891c387e80dd7ac45
-
SHA256
91b4c720f1aab6ec16c72f685e984b0342876ee5e09b593b4bcc6ad2461fd560
-
SHA512
4573d9f17fa423462e05f462e85f0a03b9321277442aeb4a454a41a7f97cd7ec26da824ca20147585bd755326bc261fbd4e2d3fe6c680c1086608a4e5396fbf9
-
SSDEEP
6144:CGWlSCKG3Iz2Eil0aNbQS45guoMH2oyDhcX0Xc0hE5I3+Lwg1kx4dzCpWNr:j1BPilftt6guoMHnRd0O4v8zU+
Malware Config
Signatures
-
CoreCCC Packer 2 IoCs
Detects CoreCCC packer used to load .NET malware.
Processes:
resource yara_rule sample coreccc static1/unpack001/Proforma Haziran 21052020,pdf.exe coreccc
Files
-
91b4c720f1aab6ec16c72f685e984b0342876ee5e09b593b4bcc6ad2461fd560.iso
-
Proforma Haziran 21052020,pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 326KB - Virtual size: 326KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ