Static task
static1
Behavioral task
behavioral1
Sample
854F1E97-5DBB-4A87-A566-33D9012B05E2 pdf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
854F1E97-5DBB-4A87-A566-33D9012B05E2 pdf.exe
Resource
win10v2004-20220812-en
General
-
Target
854F1E97-5DBB-4A87-A566-33D9012B05E2 pdf.exe
-
Size
10KB
-
MD5
23283f41618f4ed2c7d67610b9bbd7ef
-
SHA1
c37e1c8584977b3975b0616f660136ff9b3420fe
-
SHA256
4950f4e3606397e28b2a546c88d327d50d9a883c9c32c425f1e3d664a94d2092
-
SHA512
75c6c8d85810c39958aa5b93017f45c4405ad0d972b4159872f5c8688658bfa03163ad4cbeb4e40a6521b1454eade06453a13a3189d55fc62516bb7ba0c1f4cb
-
SSDEEP
192:IVZDiLKjzprrrrrrrrrrrrrrrrrrrreP2:aWLKHprrrrrrrrrrrrrrrrrrrrU
Malware Config
Signatures
Files
-
854F1E97-5DBB-4A87-A566-33D9012B05E2 pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ