Static task
static1
Behavioral task
behavioral1
Sample
comanda 4508623392-2022 09 22 AWO PROD SRL_pdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
comanda 4508623392-2022 09 22 AWO PROD SRL_pdf.exe
Resource
win10v2004-20220812-en
General
-
Target
comanda 4508623392-2022 09 22 AWO PROD SRL_pdf.exe
-
Size
17KB
-
MD5
0d257bfb38c641cf05ff2641ded000c6
-
SHA1
bba00f6d2f42fdbe45a6fa104646a7510b5cad38
-
SHA256
52df89fefe65e41a8a18d96fd687bf4c2d80b2ccd05df2cdaad67d6d0279bccf
-
SHA512
13bdc623a1ec7b90b8378a51bf58a06df1f115abf3686400c031c02446b2dac2df4ba1e0673f75e56280f699a7158560b8b5c6dadd51dd1ac431470e66263d7b
-
SSDEEP
96:4yXlIIBQ4FAuJC+UfhBO1+BQsVLlmM0p8A0fXCdJSihfSYons6ixZ6ZZkugeH6qz:4gIQFUpBOczLlLEhn9/CK6EmhB
Malware Config
Signatures
Files
-
comanda 4508623392-2022 09 22 AWO PROD SRL_pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ