Static task
static1
Behavioral task
behavioral1
Sample
132000032.pdf.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
132000032.pdf.exe
Resource
win10v2004-20230703-en
General
-
Target
132000032pdfz.z
-
Size
520KB
-
MD5
0e1a4e5c41efaddb55790e200978f376
-
SHA1
5abae12fd8ec2da491bda7600770d400f0344e86
-
SHA256
bc31cbfee477b14539e46e667fedb8ed5deee11cd26334a3c0af600cc111a416
-
SHA512
b84bcc8fad03d973ab4d912e39002ba5e968772e13f8348293e147531146131b446df55f48ba74e056e60ca9180b6e4de9d26357a7b3546bd4cb246fd2009b2d
-
SSDEEP
6144:DD48Q5avcLeTZPhUNcRvOs1r4jAGkIZmY4vE5M1AYABfyqbdGZNy+yVz2SQZpHX9:DD4P80LPo31rG8852V0KmOU5VK3yVIMo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/132000032.pdf.exe
Files
-
132000032pdfz.z.rar
-
132000032.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 563KB - Virtual size: 563KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ