Static task
static1
Behavioral task
behavioral1
Sample
Payment Notice_pdf.exe
Resource
win7-20221111-en
General
-
Target
Payment Notice_pdf.exe
-
Size
818KB
-
MD5
09424a310e2930779492102c43bce4e7
-
SHA1
7402deba5a48184df05557c71e6d784ab3f597ef
-
SHA256
29558d0c124ef9f0b3b801e37c0b2c652930158fc94d110444b3f0d43be8329f
-
SHA512
50e340e00cfeca22801a132ac856178197656cc4332d94368f768a0f6c66f1f8d10fad13c76335bab1f1d1c36513e0bbeaf3973494b0767e3699884a0f81055d
-
SSDEEP
24576:fA3CO2+LMAtgIb0R+9UZrxN5IC54TWMB:IS845BoeZtgi
Malware Config
Signatures
Files
-
Payment Notice_pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ