Static task
static1
Behavioral task
behavioral1
Sample
Herbal Tea Catalogs and Order.Pdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Herbal Tea Catalogs and Order.Pdf.exe
Resource
win10v2004-20220812-en
General
-
Target
Herbal Tea Catalogs and Order.Pdf.exe
-
Size
747KB
-
MD5
5806ab2157e9fc2dbb737d063c1c0f2d
-
SHA1
1bdea4bc5a57e209e4fa6cc3d09c5085364a6911
-
SHA256
f7b5512ca0d67dbe16d59a5ccfc7bbd5f59021adcb6fac0b09dd5533aac6e820
-
SHA512
510c5f410f1c230ac2dc5a4aac1208f38a2cc272fc490828c1f81693a87651fc6cf1223c368b0cde23601b5997f18855818a45891f272bcabcc40a9160d50e37
-
SSDEEP
12288:FlUO/LouHH1JJ2iNXu2iN0P1amcGzstP0DjFwzLXAJ8JnEIM3PqkejwFGf:NMu1j1A1kEmcvLzLXq8JEFqeG
Malware Config
Signatures
Files
-
Herbal Tea Catalogs and Order.Pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 744KB - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ