Static task
static1
Behavioral task
behavioral1
Sample
Outstanding Payment 26671.54pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Outstanding Payment 26671.54pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
Outstanding Payment 26671.54pdf.exe
-
Size
41KB
-
MD5
ce957256d6067520bd11c0b632a5c982
-
SHA1
82ce2cbed35becfc01cb723068288364a08d34a2
-
SHA256
525d161416cf895148528181858fe599611770dfca34a332d1ce491525605f3a
-
SHA512
4531bb0b948a8492e54c7ed710d3568ef363a0782548c09c0235d081bf9b575e74a544397e509cef0926a6a23de08662de0b749634411410e2199ee23749ad6c
-
SSDEEP
384:gq2L2YVwwfNyE3+v6X7LiIqr5LR5FxlQV1111yt6cj4ajdm:gqCnF4v27+15xxlQV1111O6cddm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Outstanding Payment 26671.54pdf.exe
Files
-
Outstanding Payment 26671.54pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ