Static task
static1
Behavioral task
behavioral1
Sample
Purchase Inquiry pdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Purchase Inquiry pdf.exe
Resource
win10v2004-20220812-en
General
-
Target
8210686332.zip
-
Size
616KB
-
MD5
37c9a76525112746ad44e6c49277ac2e
-
SHA1
9dfe10986660125d6bf499a1fa3ca3c63ef7099c
-
SHA256
3b7b82f05befc0843a1c6b50656f30cfab3487af522d92e963801d29a1759d55
-
SHA512
588206413e916a79920eeb41adf9670b0060ad8cc932167622991fdf224892c139dfe6ecc26812634bc432371614bda9f266b9027b26407fd417376b8f72974f
-
SSDEEP
12288:1CQl9cG+ic+yFM5CnrehWEQZJCaplAbVFL428N2Qr+PKvHB1P:UwcyuFMcrehWDi38ANSvHDP
Malware Config
Signatures
Files
-
8210686332.zip.zip
Password: infected
-
632ad6e7c5510d4d8e34107a597f9ac90af58412bc460b78be929a86fa9bbcc0.rar
-
Purchase Inquiry pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 973KB - Virtual size: 972KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ