Static task
static1
Behavioral task
behavioral1
Sample
854F1E97-5DBB-4A87-A566-33D9012B05E2.pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
854F1E97-5DBB-4A87-A566-33D9012B05E2.pdf.exe
Resource
win10v2004-20230221-en
General
-
Target
854F1E97-5DBB-4A87-A566-33D9012B05E2.pdf.exe
-
Size
578KB
-
MD5
0a0680b4cfc25a0704d45984ae136724
-
SHA1
ad26f8771832664617273a7d223e471ca712455d
-
SHA256
4a517e9b6f85668c242fb3c74f397839a428ce95aca4f95872ee73149cfc3c29
-
SHA512
feb5857e005ae99b7d67c50889d2ffe7adebf93fb814871c10dbb26972e4bc08d83a726b116500133682b67194fa7f1313c6149cc51f5682f73714805ab40e4a
-
SSDEEP
12288:U+nUsneWjQ/L7J3/WAGwKQ74j+hyDRouWUkzYaI9WMuLXTs:RNQXJPWAUaAuy6MaIUMub
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 854F1E97-5DBB-4A87-A566-33D9012B05E2.pdf.exe
Files
-
854F1E97-5DBB-4A87-A566-33D9012B05E2.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 563KB - Virtual size: 563KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ