Static task
static1
Behavioral task
behavioral1
Sample
400032624567.PDF.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
400032624567.PDF.exe
Resource
win10v2004-20220812-en
General
-
Target
400032624567.PDF.r00
-
Size
1005KB
-
MD5
591925e2df38ebcd2ddb70c6fd0e73f7
-
SHA1
0bbaf112bc62dc06e116915e0409fdd3e7bbca6c
-
SHA256
72b46c575c7a5a9bc90cd29bb66fef02086f737a7d4edf427fda03b4369d793d
-
SHA512
6d93bf9a4ca35b988f75fd45f924b57ce28e020ce90c365867770727612ddb9fb6588d29f6978616fd8b66ab515d5eba0a2fdcbb26b949c24b4ed58a1220b74c
-
SSDEEP
24576:kmWFU9FOYfbNY05mARX84e7THmNRnpIXh2FzMI+suSMntsw:k3qDOMr2rGTnuQFAITudCw
Malware Config
Signatures
Files
-
400032624567.PDF.r00.rar
-
400032624567.PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ