Static task
static1
Behavioral task
behavioral1
Sample
IMG_6160_10822pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
IMG_6160_10822pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
IMG_6160_10822pdf.exe
-
Size
365KB
-
MD5
9f7d9d269e09a8f9da818d4032a75646
-
SHA1
be72b4e2deec4228f3a9374ec0711b2cac10c127
-
SHA256
98ae8fd010b084c35d1dfdc4443518b48ddb798b51defad59da5d9f803f2719f
-
SHA512
b7ac8c43c056c04baffdcd5797feafbf9b811329e08ae2bf87f8bfe67c6d3da52b4be33144fc61e67ffacee440d3e7da96588a903f1944f352083b78c768bb0e
-
SSDEEP
6144:64Ne7HIIW+64wYJwzfA3pHsHECazSAaXJzYVF280hwYOCQ7rgy3rFSl3dixFYyF+:i7HIInxs7azQ9YjgQPL7FO3oxFYG/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource IMG_6160_10822pdf.exe
Files
-
IMG_6160_10822pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 342KB - Virtual size: 341KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ