Static task
static1
Behavioral task
behavioral1
Sample
IT.EmailToPDFConverter.exe
Resource
win10v2004-20230221-en
General
-
Target
IT.EmailToPDFConverter.exe.7z
-
Size
7KB
-
MD5
3c0a456a81d14a537aa97112ee65c3cc
-
SHA1
ea1225e28470707d6cfbfb1897194fdbd9890eec
-
SHA256
5985cda622e162318e467c051913ed853b3474d02b9d5d3598fbebf0a25e7d59
-
SHA512
976a4e34791648a37eddab2124d4ddbcb4756676296e756c98e7026aa94915829e40af4c8edb5525bc68a4d19f8f90f6c6ce014bcbea8f54fea20be3bf7904f3
-
SSDEEP
192:YDM3LPaDohvPQ2eq1VDk3waq8MjxoEYavZxLjzJ2MHjL:YDM7PIavtxDkj5cZxPzz/
Malware Config
Signatures
Files
-
IT.EmailToPDFConverter.exe.7z.7z
Password: infected
-
IT.EmailToPDFConverter.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ