Static task
static1
Behavioral task
behavioral1
Sample
TT return copy .pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
TT return copy .pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
TT return copy .pdf.exe
-
Size
1.0MB
-
MD5
10d17b5b38280ae719f8e8d9bb68422b
-
SHA1
5679dc8fcbd8f4bae164494e361590d52f04d431
-
SHA256
0312ca773d06b41b2906310879143c0737bb66dbfda5d01ec1ec69d4cfb58adc
-
SHA512
8bd099546edf4910010966821afdfdbe41f8f2dd41a501fa65cfd56799380639f9329614fcb9dfd5e4d6800e1db6564ed9c78623b94082100cee663d72fb3f22
-
SSDEEP
24576:EwrVZ96e5wbe71SW3dslTfhdVWq2FS2qef2:D3Tse77CTPVEFS2
Malware Config
Signatures
Files
-
TT return copy .pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 749KB - Virtual size: 749KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ