Static task
static1
Behavioral task
behavioral1
Sample
YS02FNSACOPJKDSQS_Invoice_PDF.exe
Resource
win7-20220901-en
General
-
Target
YS02FNSACOPJKDSQS_Invoice_PDF.zip
-
Size
4.6MB
-
MD5
d2e346c2d65c87b049c2986177e20cfc
-
SHA1
c03826e3a2bc96fe77ab3257e312d63f6a604cd1
-
SHA256
d4110a1011dbd1db2ddce8906f6fc39fb51d54925becd6fe0a010ad090cbca96
-
SHA512
21f3d5e7594a889af1e135386c6df706b961115d3e2d6b91f70613ae1f942aa4a0f708ea9699bb850b2a09755031e27d275615f6ec6dd81f8811c60dc809a7c1
-
SSDEEP
98304:czKaDrGA/lR2btudOFucpzJUZPaeAmuYTAYgIFChnhKoNp+:ceafzPktuipQkmuYAKCRDK
Malware Config
Signatures
Files
-
YS02FNSACOPJKDSQS_Invoice_PDF.zip.zip
-
YS02FNSACOPJKDSQS_Invoice_PDF.vhd.vhd
-
$RECYCLE.BIN/desktop.ini
-
System Volume Information/WPSettings.dat
-
YS02FNSACOPJKDSQS_Invoice_PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ