Static task
static1
Behavioral task
behavioral1
Sample
Bill No. SFSAH24-23394 PDF.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Bill No. SFSAH24-23394 PDF.exe
Resource
win10v2004-20230221-en
General
-
Target
Bill No. SFSAH24-23394 PDF.ace
-
Size
805KB
-
MD5
8e2535a76a0e9ef9398bae7562ec6de8
-
SHA1
2b1c89bcd994fba7d4b3c53178ec2f559e39d469
-
SHA256
e523b0e64b6b725921f72aef0e273ceacd8e18344258f434c338e73bbc9cc714
-
SHA512
bccf24aed24d83039f6b4cc6c36418fd2c141733796ba1135ccf9d3f59e092462ffa55723b051f9919374d52243e087c2bef8ebfd979be20e985e419825e8517
-
SSDEEP
24576:YhoieAc3vyz6P6sUR2FcHqYdLt8S0E6o5KisjB6l/Bcl:jF/yPsA2FIqUtHx4jBF
Malware Config
Signatures
Files
-
Bill No. SFSAH24-23394 PDF.ace.ace
-
out.ace.ace
-
Bill No. SFSAH24-23394 PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 894KB - Virtual size: 893KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ