Static task
static1
Behavioral task
behavioral1
Sample
Purchase order.pdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Purchase order.pdf.exe
Resource
win10v2004-20221111-en
General
-
Target
Purchase order.pdf.r09
-
Size
13KB
-
MD5
46652b412099ff8ac04dea36bd794e13
-
SHA1
30a904c956f8e715572d1122c5919c18f3a1621c
-
SHA256
763fda12475dbc5e8fdeb9aeb0972a47e36e1fcce179762b5898c1ef5199a919
-
SHA512
31353e8eea777ed26003818f2b3da6f6dc70dd6e9f2fad7c34b560780df1e573f0b086efe0c52248bccad0c825825ed0e4c662b6b0e475c3137c5a6d1920030e
-
SSDEEP
384:JBeZy8AI125FuJRixl44wFm2mpbkT9Txqad:JBeZy8SUtmFAxqs
Malware Config
Signatures
Files
-
Purchase order.pdf.r09.rar
-
Purchase order.pdf.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ