Static task
static1
Behavioral task
behavioral1
Sample
TT Copy 30JAN PDF.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
TT Copy 30JAN PDF.exe
Resource
win10v2004-20221111-en
General
-
Target
TT Copy 30JAN PDF.exe
-
Size
785KB
-
MD5
d2dc5cd3a42d953a3bdef0908030cede
-
SHA1
cc143849dc78eec98edb255d3c3ecb2513828b3e
-
SHA256
34948b4ad07e83786411e80a8dac236fe04439638013badf47db03d128b13c9e
-
SHA512
9b384970ed71e0f86dabcdc9e979ab7b8afef80d416e461339816bdb6ff44b3dc33a2d55ab0ac91cdf24508dfd802617c690c89c20cdfb0a36988beff4fc59a9
-
SSDEEP
12288:hX+0DW1z0C1K5quKsSxcmuWeh3ih9H2AQZAQImO5M:h3WxA5quxmuBYT3
Malware Config
Signatures
Files
-
TT Copy 30JAN PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 671KB - Virtual size: 671KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ