Static task
static1
Behavioral task
behavioral1
Sample
PO 55192752_PDF Dalian Hiscien Engineering Co Ltd iGST_eH2mYaM.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
PO 55192752_PDF Dalian Hiscien Engineering Co Ltd iGST_eH2mYaM.exe
Resource
win10v2004-20220812-en
General
-
Target
PO 55192752_PDF Dalian Hiscien Engineering Co Ltd iGST_eH2mYaM.exE
-
Size
973KB
-
MD5
76af89cc6f06552cf6815efa1b407161
-
SHA1
1bdab78ec87c979938c4fd4645961a061abaf80b
-
SHA256
f0e2be29b4f60291bb5e95eb8e23794502c74d7daff6754762ba486cf92f4c4f
-
SHA512
2e675e58a5ed9c8f9955b9c0135f754f2965d1d21611826b3e71a8288082a2573c586e901a800f304a2e93ee557657432aa02af990e63813cf470cb0de2356e9
-
SSDEEP
24576:PSzS0v+YHOtLnTtSnm0Do7BtQKft+pasie3G0iwUI3lN9nZ9GL0/+RA:x1/V+3B20TUGlPZ9GL1A
Malware Config
Signatures
Files
-
PO 55192752_PDF Dalian Hiscien Engineering Co Ltd iGST_eH2mYaM.exE.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 873KB - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ