Static task
static1
Behavioral task
behavioral1
Sample
MEDUPV843545_EXINV278.PDF.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
MEDUPV843545_EXINV278.PDF.exe
Resource
win10v2004-20230703-en
General
-
Target
MEDUPV843545_EXINV278.PDF.exe
-
Size
711KB
-
MD5
1676c57199973d3f5a57037ad8f98f13
-
SHA1
c66b7bb8c3adb39f606b3de98d32aeca76d46a5b
-
SHA256
0fd90cd98a02f708ffd1daa8bbed2c8a30857153d4e72c0f7dff682b55cba81c
-
SHA512
637f788c20251974a9f8c1735576538995d0c5270712a0dd8b9ed03a66b295fc73a4dbf9a899308012c1a9f1518352c6c87413f88377869f109b3b8d0f242393
-
SSDEEP
12288:vP8O4upowBV6PjChR8KQZXNqzBeRSk5Gzc58SlpBYZj4m4HP7r9r/+pppppppppT:38O4z+V6rChWJZXwzaSeQRSlDm21q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MEDUPV843545_EXINV278.PDF.exe
Files
-
MEDUPV843545_EXINV278.PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 498KB - Virtual size: 497KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ