Static task
static1
Behavioral task
behavioral1
Sample
09MAY2023_FDGPLAIN-SHEET_PO083942-pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
09MAY2023_FDGPLAIN-SHEET_PO083942-pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
09MAY2023_FDGPLAIN-SHEET_PO083942-pdf.exe
-
Size
984KB
-
MD5
776b529279f7fef6d0677ee5e315ad13
-
SHA1
67346af4a0b9f7e4be508227fdd502e6b045b4da
-
SHA256
584b466de40e9a985d022ba115ee7301b46261f1526516eaae36760a435be241
-
SHA512
4c2afbe1190b9c3c2169b576e661db390558a8488390463c0a7cf9761814fca0f0c64a717a38d32b58d1a0ed1a42719cb3a5c9c75c42c8059637750ea3958591
-
SSDEEP
12288:V5q0vvxVrvqwHzHh27NqUnQcG6SRZ09MqAi9a8W/PvH/5PIc1S:/TXxVriwA7Nq0G6SRXqAigD35PIcw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09MAY2023_FDGPLAIN-SHEET_PO083942-pdf.exe
Files
-
09MAY2023_FDGPLAIN-SHEET_PO083942-pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 981KB - Virtual size: 981KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ