Static task
static1
Behavioral task
behavioral1
Sample
RQ038023.PDF.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
RQ038023.PDF.exe
Resource
win10v2004-20230703-en
General
-
Target
0a3c7e7222bcca467f3eb9aabbdaa6f6925009daae94ab78e7bdb4e111354193
-
Size
567KB
-
MD5
ddfac661546a73c5450e563c1a25258a
-
SHA1
1f97cec05d58d4cf36657f96db8484d132a4766d
-
SHA256
0a3c7e7222bcca467f3eb9aabbdaa6f6925009daae94ab78e7bdb4e111354193
-
SHA512
05c40191aa9ecdb331e08fae1588025ebd407b23ed70b0c178df80d2abc63bbdc6e2da2d2e9572ce8301bbb4a43809f4cbcf6f0969aaa4b7cf29ab4190864e34
-
SSDEEP
12288:Vmm/7DcRY511XMhXFRgbir7IZA0+TTcCsHk6dWX3jfHZsx9UTajIJ:Qk7oRgcBFl0Zl+TkHkRXzPZs0TacJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RQ038023.PDF.exe
Files
-
0a3c7e7222bcca467f3eb9aabbdaa6f6925009daae94ab78e7bdb4e111354193.rar
-
RQ038023.PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 579KB - Virtual size: 579KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ