Static task
static1
Behavioral task
behavioral1
Sample
no.TTIMM20190832 pdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
no.TTIMM20190832 pdf.exe
Resource
win10v2004-20221111-en
General
-
Target
no.TTIMM20190832++pdf.arj
-
Size
674KB
-
MD5
75962edb47d5afc50b318ec8d729ab9b
-
SHA1
e8ac7fa5b1f04052d4c84716b11ee0ae9655c444
-
SHA256
b043b476b6c8a3c636f6e23c85542f211cf879ec2509047d093780e945fb6df8
-
SHA512
43778a55952c28bc53429667e3324309b2fc55d59695f79960fc30d2d9de7e0d70b345c849f737dfbf65f624f9606836fa42d1e4506d6b33394f1f230a564861
-
SSDEEP
12288:5ZaBGmq2RwpRhZZf8X+OOIvFCfWevTAP8fDBnONyNybP/3ofO4Nt:barq2Q1f8u4FF9P8FUbP/3ovNt
Malware Config
Signatures
Files
-
no.TTIMM20190832++pdf.arj.rar
-
no.TTIMM20190832 pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 811KB - Virtual size: 811KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ