Static task
static1
Behavioral task
behavioral1
Sample
Order-inquiry.pdf.scr
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Order-inquiry.pdf.scr
Resource
win10v2004-20230221-en
General
-
Target
Order-inquiry.pdf.scr
-
Size
223KB
-
MD5
aa8f306f32341498d50c6772286f5607
-
SHA1
2e994bc437bde3a9cba6ab8c1e364a382c1794d0
-
SHA256
b414ae271dc471c2b6162a39bc5152ef42df07f94577603139e8a8e004fdccb6
-
SHA512
aa9880838a8c1088be5472a8334e95b33223a2fb8361a013092133c7cf8b2723f87e4c5862aa9c1243a3063fffd6c813af1a21c482e8ca6f91c058047149a5ed
-
SSDEEP
6144:cUc59sL+Zoy4CENbv0H7TYRZsvQYLtLC:cDboX0H7s4vQYZC
Malware Config
Signatures
Files
-
Order-inquiry.pdf.scr.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 211KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ