Static task
static1
Behavioral task
behavioral1
Sample
Our request file PDF.exe
Resource
win7-20221111-en
General
-
Target
Our request file PDF.exe
-
Size
738KB
-
MD5
44a1abbd8fc39806ecce13416df1e150
-
SHA1
050136ecb066c07cbad131cf565fa07c7f0be75a
-
SHA256
c470e4b00af7989d546bcc74d51f93920ad6b17c097eb8fdece7f701d68ae052
-
SHA512
ede306271ebbb5bd08b2f21479767aead0fe7e7f62f44b2c66fc88d71b7d1f9e6711350fb7d69cb2f170d1a8a15a3bd18364718e607a02c4b7da587146de7e1e
-
SSDEEP
12288:k2iNa+PFC1XliH3mluQGhdYRhF82yyJMkOZ:k1wt1XliH3QCdYBJyWHO
Malware Config
Signatures
Files
-
Our request file PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 645KB - Virtual size: 645KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ