Static task
static1
Behavioral task
behavioral1
Sample
Document.pdf.scr.exe
Resource
win10-20220718-en
General
-
Target
Document.pdf.scr.bin
-
Size
2.1MB
-
MD5
93dd6479d9333cac3202b3ea9502a07c
-
SHA1
27ba3ddc97cb409b9d9b7c61dfb442c1c4655bee
-
SHA256
801e8af2f94a4b713c6d137eaa2c604b31b238038a6ffd6d7543b0089cc88ab9
-
SHA512
948f9a6ce1a02437263b2a6ad332e7a3c5e751776c9fe455b0aa605ac99dd87611b4a1386c4ba908d65455fa012228f99ba4a2501956afb8cc7ceaa03475f7e9
-
SSDEEP
49152:JAJ5aQAv19emYO8cH+fqhvoKgr2qq7Q+kn16sAPruwjDYlOKmgxqw:JAdCEmYO86+fqtoKAq7Q+knwnPqFkgMw
Malware Config
Signatures
Files
-
Document.pdf.scr.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ