Static task
static1
Behavioral task
behavioral1
Sample
scan00238393903,pdf.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
scan00238393903,pdf.exe
Resource
win10v2004-20220414-en
General
-
Target
289fa0412fadf3775429d27cbe5434cca821ff908a7e635c28262aeabe601baa
-
Size
527KB
-
MD5
41c0cb18e341075ad6b01288c72d9878
-
SHA1
b516c9a26bde5497c0b1948f732c23ecf23f8fe7
-
SHA256
289fa0412fadf3775429d27cbe5434cca821ff908a7e635c28262aeabe601baa
-
SHA512
79c5ac5a5b4a1f8ad7364069825510e0fc7aabb16815b5f59f7583e30049e85b0cc5b01a7ed5f518b5372825852eb37f00ab915a5e0848ad5da98de04c442c98
-
SSDEEP
12288:jfmSLIOgu4P63+bvDYEvwdbUvN0rJlh2TF0aJdHVLZ5U:jfmSLZgu4kqvfYaNa45DVNS
Malware Config
Signatures
Files
-
289fa0412fadf3775429d27cbe5434cca821ff908a7e635c28262aeabe601baa.zip
Password: infected
-
scan00238393903_pdf.zip.zip .ps1
Password: infected
-
scan00238393903,pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 505KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ