Static task
static1
Behavioral task
behavioral1
Sample
PI INDUSTRIAL MACHINES PVT-pdf-.exe
Resource
win7-20230220-en
General
-
Target
PI INDUSTRIAL MACHINES PVT-pdf-.exe
-
Size
802KB
-
MD5
c231dfcfdf5586a87d731f2c29695113
-
SHA1
eb2e81523f80c6e1058eb83525cf480d1400d69b
-
SHA256
2a187cdbf09aca5958c000b39783b1974b3493353853d59461175826852bd4d5
-
SHA512
ff26d121199922fb7f6555464679db602f8f1427368519e53b97e7d6a27082b72d318d0bd7a2c19a15f5e3f72e67c93fb702fd21255c3bea7ed99fc1f650a6e3
-
SSDEEP
12288:OoAcuF6mn1DHLZnvJM2iOe42KMu/N3mWhQmwmJCMpUMmr626nZ72xLVgi5n9Fu/i:YiOV/NOaUr0ELVgOn9FuQnvonzBEJBx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PI INDUSTRIAL MACHINES PVT-pdf-.exe
Files
-
PI INDUSTRIAL MACHINES PVT-pdf-.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 789KB - Virtual size: 789KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ