Static task
static1
Behavioral task
behavioral1
Sample
182376,PDF.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
182376,PDF.exe
Resource
win10v2004-20220812-en
General
-
Target
182376,PDF.exe
-
Size
107KB
-
MD5
d97e41f8d67fbb966509824bf34191df
-
SHA1
f7475eee9fe28e196d2d65f4803ffe48a3dc2b26
-
SHA256
da1affe84e54055e68af38dc7fda253d538925805b563d7a87686338a7b8d0e6
-
SHA512
1d699ee7f3f537fa3e4ba1510cf19160cf25cbcd1a669bc1316b517f9891bc9fac8cbc332b0d1a6b729c3c1e9a71cd3a3f7331de86d9f633aeac5bbb14921484
-
SSDEEP
1536:gx/tmQiKh0Ovt0Xo++vw/18AyMMK4MIy+ZmVcl:6tD3OXo+mwNJb4MIy+Z8Y
Malware Config
Signatures
Files
-
182376,PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ