Static task
static1
Behavioral task
behavioral1
Sample
IMG_11560_0753pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
IMG_11560_0753pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
IMG_11560_0753pdf.7z
-
Size
586KB
-
MD5
52085c6450d79958b936f97a144158ae
-
SHA1
6a6b2b1f7eb478413d9c31d6552ced2323712f06
-
SHA256
28d55f0fa1aa7ef74ce845d43a76f94cd34ab5861b6aae5d565d123cb9314398
-
SHA512
1b4c4de93d055a2c8c06ac0ac778237f793292fb727be7c8a7c229a33578b92c719752e4d9545ff06eb14c0a47e671943f0e97c3816bb438de44485431af7a5a
-
SSDEEP
12288:ZfxYyhJWiFItjZ9YvrWkpbDsK4EEerdK0jvxAWo99TCsJo5UP:jYy7WiFaLkqgsK4EEeBpab9Q5UP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/IMG_11560_0753pdf.exe
Files
-
IMG_11560_0753pdf.7z.7z
-
IMG_11560_0753pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ