StartW
Static task
static1
1 signatures
General
-
Target
T1036.zip
-
Size
4KB
-
MD5
ec6fe54f247141641a6de5662cc8b52a
-
SHA1
bea38080ab5f2131637eaad697a113f1272141f6
-
SHA256
695b0f4a4cbd2d6813d0a524ba7f70c609cda743b5a9c71f5d7ffbcadb6d845f
-
SHA512
bef7153a0ea17c79c8a31ca23d66ae2d658763304851ac7aa2045a53b059a06a0c128c4f6771fa8d7713a52d5229fd1e9aa8bdc6d26055fb8ff53bd08324ae66
-
SSDEEP
96:t6N3Av7a7H2JcAalD2fgayp7YWFmtlonuZykk8oyyFG5JTar:t6N3YacQ6fgayp7RFmtlonuZ0uJ+r
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2.pdf
Files
-
T1036.zip.zip
-
2.pdf.dll windows x64
376f17c483a08d322404d3c4a8f0a5ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
WinExec
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
vcruntime140
__C_specific_handler
memset
__std_type_info_destroy_list
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_execute_onexit_table
_initialize_narrow_environment
_cexit
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
README.cmd