Static task
static1
Behavioral task
behavioral1
Sample
overdue invoice.pdf..exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
overdue invoice.pdf..exe
Resource
win10v2004-20220414-en
General
-
Target
e849cc3b6671fabe1b86826bab3733471852146450ae864ec3388934058b9186
-
Size
343KB
-
MD5
256e1bc435e39c38a6e8abc7da99c672
-
SHA1
50a7a91c110a413262d293968899c5c13d9bf98a
-
SHA256
e849cc3b6671fabe1b86826bab3733471852146450ae864ec3388934058b9186
-
SHA512
5785f6a6547b3110703a73aad12d31e56832b63d25d4b43a526c8057b5b083ce3367f9f39a35541e197727cd05bedd4817979d28a90dbc1dcaacaf8f51033ca8
-
SSDEEP
6144:HLNXEKrEPUjZa3zlnZ3lZq9KTOWfyHs/sErKdpiBONC:rN0NPUlabe+fyMUFdp1NC
Malware Config
Signatures
Files
-
e849cc3b6671fabe1b86826bab3733471852146450ae864ec3388934058b9186.zip
-
overdue invoice.pdf..exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 474KB - Virtual size: 474KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ