Static task
static1
Behavioral task
behavioral1
Sample
invoice.pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
invoice.pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
invoice.pdf.z
-
Size
712KB
-
MD5
a266e6e5da5ffa1e35b5f6e3316376ac
-
SHA1
80bcb39315620d4d1c989d07a46bb566246a11f3
-
SHA256
872f6e199585552edeed7104508fc56ccc1d4c6a5a2501e7608522dbb9eab798
-
SHA512
e02914dbed894a909531912dc1e80ab750b1902f3b7e83a1cd1fe33fa8e8606e00925f087bab49356452528dc5eb81ac61949d5d95baf717fe44691e2091745f
-
SSDEEP
12288:6Qug8Ha7BvETWnZJNBSrUoPV5iu/JbY/qNQ0FxQOcpSS63dhiQqYPmvsBlFIXy:6Rg8HaZ/ZfBAUMVQAJ0uDQOESt3riTMP
Malware Config
Signatures
Files
-
invoice.pdf.z.rar
-
invoice.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 785KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ