Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER-34002174,pdf.exe
Resource
win7-20220812-en
General
-
Target
PURCHASE ORDER-34002174,pdf.exe
-
Size
91KB
-
MD5
e8efe98153e26277066ef7386735cf73
-
SHA1
f9f3e5e8d07d1c66f510bac3a6dec5c396b9d639
-
SHA256
b24fbc3057f54fc0facdd4da5d0a4e4a340af76a32fdc2074cd7545838a0db08
-
SHA512
778c34c3a7bb891d523d000588281dfea20f71e86390c8c784e28d8f68a95dc81dad84deb9151b73de4425574b5ce9bd106634654c54d952bef6ee0e2225e9b2
-
SSDEEP
1536:PMM8BNRIOkzRv+iu65jDLt6EXL42TJXrlrurqyHpJBglo7Qjm9nDhPTHOmVcl:mzk3D5jvtBE2BBrgvpJCIZBhPLO8Y
Malware Config
Signatures
Files
-
PURCHASE ORDER-34002174,pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ