Static task
static1
Behavioral task
behavioral1
Sample
DOCSZOE23050007pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DOCSZOE23050007pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
DOCSZOE23050007pdf.exe
-
Size
804KB
-
MD5
c1af9dd5dbe6f087e78c8b8bf7761aa7
-
SHA1
e5fe5a422cd5e1ef9c69cb3b902699c22ad67ff7
-
SHA256
3477f5ac29fa2d6628d29ae208eb4a2d8b664997f8d6bf122009930abfbd2674
-
SHA512
fce2327d7c215a27d351ee00a9b36af33a7295b9107475f1fe347c4dfb86843a42a570bbc962bb8752e63a969d30ac08445210acc3067a8596e77bcc61532022
-
SSDEEP
12288:g9LpNaPn0YPX/N94+OCUED8DMD7pn4oMBEQCHnWnWNbL3H9w92V+j9P6itkJxlEq:tP0tQzpnPMBW2n83HCAM6Ilq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DOCSZOE23050007pdf.exe
Files
-
DOCSZOE23050007pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 788KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ