Static task
static1
Behavioral task
behavioral1
Sample
rScannedCopies_IMG-PO889377390_Amendments.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
rScannedCopies_IMG-PO889377390_Amendments.exe
Resource
win10v2004-20230703-en
General
-
Target
rScannedCopies_IMG-PO889377390_Amendments.exe
-
Size
658KB
-
MD5
0759f7fcda24b6700b71c67e7c4fdea4
-
SHA1
3e58d45bd8411ec2a0b5646688f2f9be6f14a954
-
SHA256
660be4c3676e157ceffbe579aeb01bb2ecd89646680310bbd95031280e11cdf1
-
SHA512
dba3d3dc32cc683159417589c1c8d439622ccc46311e9686b62c6ac47c05c859603b7ab6ea4007d68dd878cb2d44c90825c993b7dfdaf6d5c7f481f39ae751cd
-
SSDEEP
12288:/x9hR5AITvJYjXaiUpxgj7n2Trkjc4iJt6geyBJQcrIXGZyVr:/x9hDAqvJ0XcY2aiWgeaPWr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource rScannedCopies_IMG-PO889377390_Amendments.exe
Files
-
rScannedCopies_IMG-PO889377390_Amendments.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 649KB - Virtual size: 648KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ