Static task
static1
Behavioral task
behavioral1
Sample
IMG_2560_07588pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
IMG_2560_07588pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
IMG_2560_07588pdf.exe
-
Size
2.6MB
-
MD5
32f2d7c0a6af9eb96bc8a9f18a95250d
-
SHA1
1f75de7f58f02640d65332cc6112fbe94e356699
-
SHA256
277e24866f14e56d5579dad72d309676a55f8fb446085be4679cd42b61eee918
-
SHA512
b8b9b102f746fd889b3a0a097c9fde9a82233c67a98252d8ab674089346310c8110e5017b12e5ee7662e1ef57ea0f41d85f588e25c13ecbcce9dc304f77fba63
-
SSDEEP
24576:nFQ24ZXcZ+sVM/urmZVeVBIRZFP8T5MizxHW1mSNAvRI:nsm+RxzeVBmZd8ONAZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource IMG_2560_07588pdf.exe
Files
-
IMG_2560_07588pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ