Static task
static1
Behavioral task
behavioral1
Sample
IMG_120_816720pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
IMG_120_816720pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
IMG_120_816720pdf.exe
-
Size
1.3MB
-
MD5
3118d8f47759a201d9c5cd8aa4190e88
-
SHA1
d1308e7e99493f2211970442fb65361a60928028
-
SHA256
d090c12140b6bb4e82526fdf15fe3748efdfdbbccd1e2e8575b34ae26cdc6fe2
-
SHA512
0b11a8eba24071e2ddea950508e233d2472e5b3ad82e05993d91a23cb9265475261433c805a3d371664e53e845b551f3bc458ec3a2d79f3a88ad3f98f7852bc2
-
SSDEEP
24576:/L05jUgYS7f+8FjHX8w3HK9jCLQ90QMHbHJKrN5UkyVRB/PryHHlA+C5:EFLMeLM9eHM5yVRtZ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource IMG_120_816720pdf.exe
Files
-
IMG_120_816720pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ