Static task
static1
Behavioral task
behavioral1
Sample
Fund-Notifications-545pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Fund-Notifications-545pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
Fund-Notifications-545pdf.exe
-
Size
5.2MB
-
MD5
68aa4f34a072419ae905d1cde1f95657
-
SHA1
eed899d2ae028a58bbb8bfb27c18282c26b2acee
-
SHA256
91317464f677d1408e609d2296203b84cebed70ebc9aec92b51734c52db5bb32
-
SHA512
bd28fff606bb2d9efeb0da9b512cd892755ec74759bda8c9d7ca20ddf6a502c277dcbe02a64c898bd52b983884b67891976611f6abf57393c6a18a055171ccd9
-
SSDEEP
24576:aSKuD4f2v9Y0Z8jmzN6epIou2dua0acpXXc0GoK1D4f2v9Y0Z8jmzN6epIou2duw:a2cIZ8h4OsoU1cIZ8h4OsoU
Malware Config
Signatures
Files
-
Fund-Notifications-545pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ