Static task
static1
Behavioral task
behavioral1
Sample
US $ 295,500.00.pdf.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
US $ 295,500.00.pdf.exe
Resource
win10v2004-20230703-en
General
-
Target
US $ 295,500.00.pdf.exe
-
Size
665KB
-
MD5
f18a07e69e32f2057d8ed8582a3500cd
-
SHA1
2a6bb4b9c8a96d4f16dfd90894b07808f30361e6
-
SHA256
bb5557412213a1e283b548c6cd1da5c5848610756cd98352e6a77bb7ae952839
-
SHA512
67eb475cfb9e1a16f5c4aa543caa7613817195b8f12c160308f13a981ecb9d5a8a5fc66bd46ffb3cca3f22e618b5d8c97c9a48c41b81c840213eca62db2a4351
-
SSDEEP
12288:akaNZ2Di7UAp1TlC1+iwdNMbPwhro2PrKv7DFiKT2XYxRrou:RavJDp1TIvw4Sro2PraDFiKyXYxRro
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource US $ 295,500.00.pdf.exe
Files
-
US $ 295,500.00.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 642KB - Virtual size: 642KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ