Static task
static1
Behavioral task
behavioral1
Sample
Arrival Notice_pdf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Arrival Notice_pdf.exe
Resource
win10v2004-20221111-en
General
-
Target
Arrival Notice_pdf.exe
-
Size
620KB
-
MD5
b28efde61c00bf4b0dd74c904e0c01a1
-
SHA1
04d9146dcb5b1c98b384bca8e870bb34c1b62837
-
SHA256
dd5156b7d491a748caeb73c373c0d64a06b61d62d84f9c5a906b79bf816cad76
-
SHA512
0387d4a69aae4331c6a6573a5a9fae76dde600bc92b2956ae00fe05ecd5fae74b25b9ba0fbfaf936d61d7b5a0539ec38d82ef235bfefa05b482eadbe0bf276af
-
SSDEEP
12288:LSDiM/U057k2rnu6MfWv42qJ73uXozBOC3K8vMD5hOhNP3/Z8:QRrnu6q2qhKSQC3K2MDi5
Malware Config
Signatures
Files
-
Arrival Notice_pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 618KB - Virtual size: 617KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ