Static task
static1
Behavioral task
behavioral1
Sample
Confirmation Slips,pdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Confirmation Slips,pdf.exe
Resource
win10v2004-20220812-en
General
-
Target
a3dd74738d74ded3666855f6fd19d6b5.bin
-
Size
706KB
-
MD5
7b163f54c04c68ad03a52a75454f3dba
-
SHA1
8b5ef288c7b8fba07aa01c0611e194cc3f628736
-
SHA256
67133da3e607a5f4070a1b6dd9671bb80fa7e122df49d98fbab5bb2978bf3087
-
SHA512
464fceade9a34300df9dc0322136a19cea149227ce4b020d11a522275318281cf53c567a4583d05446550dcc4b49c11419d38278337ea08f010106cda0ea4b6d
-
SSDEEP
12288:2VBcTq+hWrPePyG5VpGnpMzM9Xx+m1bXvnkOG5pZAvNAAx7spYlAP:2Lc2+hW7ePnGpDUmFX/kp3ZAvOAZXAP
Malware Config
Signatures
Files
-
a3dd74738d74ded3666855f6fd19d6b5.bin.zip
Password: infected
-
13c528d8bd29a171aab53ab0fcc11dcaed18a2b7ff2f821cf7187b91e4f0566f.rar.rar
Password: infected
-
Confirmation Slips,pdf.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 854KB - Virtual size: 854KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ