Static task
static1
Behavioral task
behavioral1
Sample
Quote Order_Parts & Drawings·PDF.scr
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Quote Order_Parts & Drawings·PDF.scr
Resource
win10v2004-20230220-en
General
-
Target
Payment slip INV2023-E56975.pdf.z
-
Size
905KB
-
MD5
f13c0e3262c229a827a46c57960ce705
-
SHA1
18a363625aebd8dc01280ab9ad0efa88dddaa98e
-
SHA256
e2528e060601025dd31d59de6b5256b3b030aee33ef822ad9163521060e2a368
-
SHA512
1772af43968cab33ea43575ba7bab0c7b68fd35198d42bc3913382cc7d671f821259519be709a220c1917cb93aae3ebe8738f35fb7d8f57ad0bb31e44d3f471e
-
SSDEEP
24576:Z4ECAkSmCKBhu7gkjkTbwIySRHde4o8rP:Z4EidrLcgJTb4S3e4rP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Quote Order_Parts & Drawings·PDF.scr
Files
-
Payment slip INV2023-E56975.pdf.z.7z
-
Quote Order_Parts & Drawings·PDF.scr.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ