Static task
static1
Behavioral task
behavioral1
Sample
PO#00082023.pdf.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
PO#00082023.pdf.exe
Resource
win10v2004-20230703-en
General
-
Target
4fec7954aa3371bf433c08e12761cdd6bd56da4ddfb0b0f4e38d752f41a2a9fetar_JC.tar
-
Size
508KB
-
MD5
7a2c0eaed4b543d83488a53dc64f8926
-
SHA1
524dedf7a86b0681cb8d396bfc877b508eccd92c
-
SHA256
4fec7954aa3371bf433c08e12761cdd6bd56da4ddfb0b0f4e38d752f41a2a9fe
-
SHA512
c6802077e8008579e3fab44cec86f7e411905ce131c43bdcd134f294b1106232bd5597dcfd1f13ae888b0960f9239853943de1937e4b7c1be087218ab3e16780
-
SSDEEP
12288:Des2JmEJZKnyBJEq483KgTgixBJ/Dzi0lD+0:asu1cy4q48nEwBJ/dP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO#00082023.pdf.exe
Files
-
4fec7954aa3371bf433c08e12761cdd6bd56da4ddfb0b0f4e38d752f41a2a9fetar_JC.tar.rar
-
PO#00082023.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 788KB - Virtual size: 788KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ