Static task
static1
Behavioral task
behavioral1
Sample
EML_PRILIV_0934·pdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
EML_PRILIV_0934·pdf.exe
Resource
win10v2004-20220901-en
General
-
Target
EML_PRILIV_0934·pdf.exe
-
Size
1.0MB
-
MD5
d3670d78a5fa5d60f056cab4cd89d0c9
-
SHA1
3da3764700a4f230558f44430d3db2a0757f1080
-
SHA256
adfbe5218ef5a0aa13c2f76dad933147e9f1a3a690057a0ad33d5a11ba8a6276
-
SHA512
9d6840f99a35b25d7e7ef7ef55ef91be5a5d9cb21688243e771b4f07284fa01c1952ec9bcc09f500f505b063dc17d247ddb056011350cb2832b0f1a973f441bf
-
SSDEEP
12288:DoLrF27XegxbkmeRw5+Kp947xljLLigSIF7bRaAT1t9nvbmjsS+rKb1Mc62:ckSgFkmWwoKL4HjRTF7bLfBvRS+A62
Malware Config
Signatures
Files
-
EML_PRILIV_0934·pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ