Static task
static1
Behavioral task
behavioral1
Sample
EBKG05955223.pdf.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
EBKG05955223.pdf.exe
Resource
win10v2004-20230621-en
General
-
Target
a612ca41940e6b375c3ee12756558677.bin
-
Size
507KB
-
MD5
20fc37c13a80cbde48d1180411809584
-
SHA1
ee01babb44dc764c86a85adf7e36ce18a5652ad2
-
SHA256
f2ff92c7dd6748816f2ae27c9e1628f3865800587738d935d4cb8610069bd205
-
SHA512
d6f1420249de0f62bf7e4ca33393f604470110d1fce9be0bd1ee59913e96fd33b5123701e04abf9559a6a1d8d0c62c965aa3a6cd9a8ce083659d55918632a454
-
SSDEEP
12288:cUoDeq4Ue8aneK0E0d4gdUvzKoya4lYQONDfw+ma1QDCcYjY6:cUoDUD8anUddVONDo9aTY6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/EBKG05955223.pdf.exe
Files
-
a612ca41940e6b375c3ee12756558677.bin.zip
Password: infected
-
ff32f85c1fcc4a9aa2fb45c3958bf2d750686e82df02a415315a33120bb1949b.xz.rar
Password: infected
-
EBKG05955223.pdf.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 639KB - Virtual size: 639KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ