Static task
static1
Behavioral task
behavioral1
Sample
PI_KPCPU_231(MECH)NBI-pdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
PI_KPCPU_231(MECH)NBI-pdf.exe
Resource
win10v2004-20220812-en
General
-
Target
PI_KPCPU_231(MECH)NBI-pdf.exe
-
Size
72KB
-
MD5
58a8aa4a36feab467de4cc04f75b45e4
-
SHA1
a4f2f4c9a3fe4bcbadbe4b144db7781d7d2e5db0
-
SHA256
3b24ec5793d1bab1702f0c857e91dc83957fff276b9e28060898b9ee9d731617
-
SHA512
4c2c3ba05bdb391888beb3bc07a0228245da1e17c32d9128cad218a01e4bed9c4ff2aa301286678c16b7e3d44002e7ed0a51996b5e8913566a0a9d8cf94d7943
-
SSDEEP
384:BPIHFMG+7CkvZilZq4KCm+ApH1ThO/FU:BPQOVbZilZq4O+wr
Malware Config
Signatures
Files
-
PI_KPCPU_231(MECH)NBI-pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ