Static task
static1
Behavioral task
behavioral1
Sample
ORDERlist85398pdf.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
ORDERlist85398pdf.exe
Resource
win10v2004-20220414-en
General
-
Target
e493e036c04f67ad8a5828c677951868f3d3f9a16133ea7c8f0812592a6c1546
-
Size
447KB
-
MD5
8af57b83e7b2ca748bdb94be74c26a83
-
SHA1
5e539db706b2d1e5dbe871af4460ed499a1e305e
-
SHA256
e493e036c04f67ad8a5828c677951868f3d3f9a16133ea7c8f0812592a6c1546
-
SHA512
88f56216c36fbc41e54122020daa76c087e31fc2d041827933324259b4bf30fd9529276bc1f19d38a0320ab976b7b54692d3a624824c8d84351ec28cfaed5e58
-
SSDEEP
12288:SOcRNSkyPopS0fi0ESQPMJ0zzTySR3Q/r1QCUvc:ncRoRqq0ESAMWrzhvc
Malware Config
Signatures
Files
-
e493e036c04f67ad8a5828c677951868f3d3f9a16133ea7c8f0812592a6c1546.zip
-
ORDERlist85398pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 519KB - Virtual size: 519KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ