Static task
static1
Behavioral task
behavioral1
Sample
ac03353f0ee1e9305418c42b3abe85bcd93b610d75aa4ed6a511ad80efbd58e8.zip
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
ac03353f0ee1e9305418c42b3abe85bcd93b610d75aa4ed6a511ad80efbd58e8.zip
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
scan00238393903,pdf.exe
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
scan00238393903,pdf.exe
Resource
win10v2004-20220414-en
General
-
Target
ac03353f0ee1e9305418c42b3abe85bcd93b610d75aa4ed6a511ad80efbd58e8
-
Size
527KB
-
MD5
742f846f88f625a6cbd3449b8170fb6a
-
SHA1
f282a5560b9cb2294bb50871c07aebb5bf6530db
-
SHA256
ac03353f0ee1e9305418c42b3abe85bcd93b610d75aa4ed6a511ad80efbd58e8
-
SHA512
f9b842d4755cf50c2cdc2f201aa4274772744b2195c85dca70c0c16f4df36c22e1c079a90dff019922c2145a7ba0672ce751dee4f738dfc10645ffe751101946
-
SSDEEP
12288:ufveYssiwfUPopXQymNTBDgWkredZcYA6y1tsfFOdGN:pYsspUP0Qad2AvyFOdE
Malware Config
Signatures
Files
-
ac03353f0ee1e9305418c42b3abe85bcd93b610d75aa4ed6a511ad80efbd58e8.zip .ps1
Password: infected
-
scan00238393903,pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 505KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ