Static task
static1
Behavioral task
behavioral1
Sample
UPDATED PI.pdf (2).exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
UPDATED PI.pdf (2).exe
Resource
win10v2004-20230220-en
General
-
Target
67d7e18dab3c76271b7e4aac223cc5a0.bin
-
Size
574KB
-
MD5
e4900ac819860e90627a126b498948a9
-
SHA1
875ee167d2d293d25b97d1a24ac7121b79e591c0
-
SHA256
d07051d8a0f1735e4f980129fe270ff56e847180be7e0c8a52a6c73961650db1
-
SHA512
3fd347c400a8ac04282b51c7977b83c863758ad550b0315eeace56a9ec017d61a7dbba820b3bb66640b5063ab02a105bf214fa79f6adc3fc36cf37ef07f881c9
-
SSDEEP
12288:A0fpao89ex1I+ymQD3T4txRoQ6VXIdVTief6VsvidnnG:wooex1I+Jy30txuQ6IdVTr6VsvOG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/UPDATED PI.pdf (2).exe
Files
-
67d7e18dab3c76271b7e4aac223cc5a0.bin.zip
Password: infected
-
24d4321300dea5fcee8268a6cfcf2977961aedaaa3e435338cc3b9aa8184e941.rar.rar
Password: infected
-
UPDATED PI.pdf (2).exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 816KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ