\��Sb��k(�/��'L������n�j�;��Z�����ñM�����7�j�KH���tT8��p�ӹpcVW�U|l�0l_Gv#�5�ݵ0����~D��B0^d� �k��`;͒NR��y.�[�daw�K^@&f���_8@{d7�<��w��%�5ԞVW�Y�"���F���?x7̚BG��B�f�.� Q����h��V�Qu\�#Q������-����__A{�t��S�$<;@�r�?}|n���p���J�������Ym(����#�"_���֍�3�o*����B0!R�H\�~"�P?b�Z�8<1Dw�B�ܷ0�-u������c;�����,Z���_z�_���.����I_28�%M���>���IC� ����c1q;I����m��3����g+�/hҢ�E��{��I3d!-�pFok������~S�*v��H�?nTA�a^NV�RȖ�ц��Ʃi�9X̞�A���i�`���:Q���_���`�w#�d�$�\[�j�@4�Q���|��(���j��Z�(�\��%!�����r8y?.��(��U��ܷ��J�u��U�h��\֕�a��$PG ?��� �cr只���DB1��f�,(�^���������J�_�S������3����D�9v�]��S ���y��5�5f�` ̭u�ιu�˓��<��hzO��(��sZ�nj���.v�����]�ߚM�;�`�"Rk�T���9N~g�����������T�[t� �jq�}��~V5��t�XȠ��uC��m���P�D`�s�H�(g4�e��Y.g���t��,�\��㻪���V�:���7 t$� ,���������D8��w��G��\�n�� �����Ku�e�N�G����ɼ 1�v �� i����@m��U��l��v��F/�S��u[���7�����|:�_j���aZ��#Cش;�����b�i)n�-q�N��O�-�(B%�����4�z�-x����,�22�A��M����-45�Krx��c{���e�v�g1���V��.�_�;����'�h!H �}�����;������J���z��a^�pI3�yL��9B)��=�q��=n��D.{ ��#gŐ�k�;�HK�rTH�T R�^�y:��f+��X��Ñ$���y�ix4S��\-�@>�+���q�jZq���>KS�����ѵ�N��ltu���{grpַ/6�%\MOgu/T�@�_�mcVUF�[gc�hQ��N��$jwf�oh���γ%�9���h�g��!���>�~{q%\�\��ɍ�v��=>��/zrN]���2�:�7�ϐ�_w�Q�����re�"���D�kpB���zݟ|����Dt@dƊ����Y�캖��_�m��l%Y�\P����ple��_V� 0r.S��\�����ޤ�r�B~D�Lʼnʦ���܅D�3��_�y �A�#�4�"�F�>I�IhCU���Od����d�.���l�M�NؐkR{ŋ�ڴ����ͬ�� AhX���d�@����1���Eڜ�;6�#�L���`�L�����=�Q?��V(r�h��ޥ++bC� �f�B�M���Ug��^Q'+SZ ��w�i��C}��B'��sk����ҭ|�=j���K�2Eo8��n�<�泔f< T~:�����SOE��4��"����XD�P��Q�c&|lja*�5of�g7�/� jZ�wdZ�L��Lz$2�r�i���;ٮ7�9���QZ�Y>��n4��ަ������L�O:��ԾC��a�"�����A�]ex��(�Yl�<�@�Z60�m����+��� ���a'prK�|"�;�,�������rx��WFmB���$� �;e��i��e\����[�$��ځ��a� ��.�uXA���hK}E��C�r�i���S�-u�Q�����L���T8���[�Yd:��%�NxF�f_�;����3�hr������-)�C=�����|*�� ��PRX�'�h�����W���HM��)WC6��^�K�8�퇁.�<�ÈÈm�hb'X��=vX_�*� ��'��J�������M��`�$���*��d�錯��BlO=���`����_�%��s�� �J��~�������k�4�j�F�-�� YO�s/� ��p���53Ȇ�K��cf�g�)a�խ����Omț����Ʌ�O�\��,Y��Иzp�˩{9M�`��=�5_8���(v���33;)@7z)�S��R #�����������"t���`�Gb����s�X�M��N>~l�QJ��dm�gu1d��tV}�U� Ƣ�� �<���\��s mC�ui3�u�y����<��V�at���U�,�1��L��^xֺ٢����xɓ��K��Zú[T��zlː����,�O�J�id̖������;�� ߶�3j7m"�258�d���9���,hG�D70����4��Z F�X�v��֬e�{�+kB{W����ug�Wp7�')u�(�9�`Tֵo5�75�.���<�qا9o�>�4�~?3f�Ƭ~֭O0����irđڻ�>�k���?nF��jF|����&Ҏ �F�c_E�J[���*���A�K��L��G�����d+����gE\�����[(��;Y����h�:�r@����|��a<&�ƍ 7�0�B����|J�r��L�� ��7������d��.VJ��C�_N�|�g|��Ŵ Sp���A��Zw���=��~X)F��D�py|=���?��'����cX�{�_�ZP�x�Eϵ,ؤ1c�j��*�<P�И��IJ�-�C=m3�x8�&Ǻ�S�����=oE�&�)�0�ڙ�G�h�$j�� /��Ubqb�D��p��*���W�>o�t��+a�Mj9���uPv9D{��p�tSy ���Ǐ[�e�k2�k�Ŏ`��?y�n-�ǁq�z�w��Rv{���S�x6o��z�IJ�*f�s�b�_�)���d�������*
Static task
static1
Behavioral task
behavioral1
Sample
Dan-Smith-CV.pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Dan-Smith-CV.pdf.exe
Resource
win10v2004-20230221-en
General
-
Target
Dan-Smith-CV.pdf.exe
-
Size
2.6MB
-
MD5
ed034d9460bda17f5656a56055c6f8b5
-
SHA1
489394fd280844e1f0f5fd38e1f20ada10132d6b
-
SHA256
f3772b5913d62f5557918e7f51d3320cedda6c192140852b7306b1065745cab7
-
SHA512
6f9893df10cd7e775d38dd8d65953ff5d49d1878240ed4218a95c02a43af9792a83796c87be0d1394062eb03a0d3344b220fc76ed181dbc2d20f08c8364ebd0c
-
SSDEEP
49152:g8LG1b2J8Z50i4fW6g5C9jXVBY7u4+XA9xRX1SJyPJt5p/UWEqlU+c:gzb2AV4utWjnY77uATRX1GCr7a+
Malware Config
Signatures
Files
-
Dan-Smith-CV.pdf.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 27KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 194KB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE