Static task
static1
Behavioral task
behavioral1
Sample
Remittance20036pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Remittance20036pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
Remittance20036pdf.exe
-
Size
2.5MB
-
MD5
b689c5cb896835c4a6a3bbe33129dd37
-
SHA1
bc28e1905621106085707866a88162c9a867a009
-
SHA256
62c22196418123be9af8ab9c5a0d6ceac9b966b8ac5c241fa2f59fe64f3dbf50
-
SHA512
95d1504adc7b88c287ee72ae975a95e7c64dc9f2eaa58b5706699a1b0131c2284ce820e79c97fa241536608f30813f21dad791df7df6b38064e3c4a5ee69073e
-
SSDEEP
24576:xBrXtw2Irak7ZoNNosz4TztSXXo5pl9YZq2v3ret511WKe++7PXf:X9qNm4T86MejWjTv
Malware Config
Signatures
Files
-
Remittance20036pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ