Static task
static1
Behavioral task
behavioral1
Sample
Adobe.Acrobat.XI.v11.0.23/Adobe.Acrobat.XI.v11.0.23.exe
Resource
win7-20221111-en
General
-
Target
Adobe.Acrobat.XI.v11.0.23.zip
-
Size
6.8MB
-
MD5
73b2965caa11296371f9ef8f01b48c72
-
SHA1
3f869ac78ebbf2a6334198b2d62536c87ab17219
-
SHA256
818305acf52a909b3bfd7932766cf1f8769e32787a8bd7eb77a6b2021a5c59e5
-
SHA512
00235db842de24373a12d2579713d38e09e6f0955252739b6030dc940bb4e4caae7c363febb8e495f47eb302f7f90093cd242270bafa69d139ca2d8b6293a666
-
SSDEEP
196608:h2zy5pXGyd7Tjen+XQcTKbvneZaEeKIMATLqC0T:h6y51G8uWQJXDw
Malware Config
Signatures
Files
-
Adobe.Acrobat.XI.v11.0.23.zip.zip
Password: 1234
-
Adobe.Acrobat.XI.v11.0.23/Adobe.Acrobat.XI.v11.0.23.exe.exe windows x86
Password: 1234
4fbc225d764f6fcc9c27fe3e887d473e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
ole32
CoCreateInstance
oleaut32
VariantInit
crypt32
CryptStringToBinaryA
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 242KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mOq Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.S!U Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SKq Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ