Static task
static1
Behavioral task
behavioral1
Sample
Mortage information files PDF_parsed.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Mortage information files PDF_parsed.exe
Resource
win10v2004-20221111-en
General
-
Target
Mortage information files PDF_parsed.exe
-
Size
512KB
-
MD5
7ed167098505af94bfeade11982b112e
-
SHA1
083a7280bb44d39e08cb4bb4d47d1ab5ace6fb0a
-
SHA256
1e9da999708729b12cf9b9e29c44d4a1968251f2b5a9b8882f2bf2627503731a
-
SHA512
4e22118885319443aeb90bbd6d896503d139e0204e34ebbf49c0f922454ac5b5a781adeee3564e561a23b52d69dac6cf872b2129d9aa4825384201da990145fb
-
SSDEEP
12288:s2zrXH5tH9a6OXEU2sxZReE5G6fuDp0P4ptTzGlKUh:jznHVOx2sVhGQPaM
Malware Config
Signatures
Files
-
Mortage information files PDF_parsed.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 503KB - Virtual size: 502KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ