Static task
static1
Behavioral task
behavioral1
Sample
0028200282 - INV_pdf.exe
Resource
win7-20230220-en
General
-
Target
34b984dc3d53c9a37675baf2d7256e668a63c770cf88ceadf7822b8506623d41.zip
-
Size
2.0MB
-
MD5
8c2e6aad0e2781d5c881bace054ce5ad
-
SHA1
755c8273d679c57646bc80d5f2fe03e8cf507879
-
SHA256
22adf3c6c4b351b89c7381ebf61385fea9b070508304e73c041b7050afabb3cc
-
SHA512
f070b006380955d90376edb558ebd1cb8ee540fef1ffcba41a5eb232d85409ee4d755c5916e6aaf4d777f192467795e82e7965c15344cac5eef1027eda0c5429
-
SSDEEP
49152:oS+I/CGeHffXACLnyTg6I++wbHgyDpl1p6PZhDfsXAubaPuBZgGjt5:7+6eHwCt6F+wbAm14x5fsX5ojG3
Malware Config
Signatures
Files
-
34b984dc3d53c9a37675baf2d7256e668a63c770cf88ceadf7822b8506623d41.zip.zip
Password: infected
-
34b984dc3d53c9a37675baf2d7256e668a63c770cf88ceadf7822b8506623d41.unknown.tar
Password: infected
-
0028200282 - INV_pdf.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ