Static task
static1
Behavioral task
behavioral1
Sample
SONG_HONG_SOA+BANKSLIP170823.pdf.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SONG_HONG_SOA+BANKSLIP170823.pdf.exe
Resource
win10v2004-20230703-en
General
-
Target
4c5bb849aed0389ee9177c8f64a79bba33446047f66fa08482345a72b99b6e02
-
Size
419KB
-
MD5
19f28881d9557823f8bdd91567d043c8
-
SHA1
05b43c25c37f92d66fd8141e0216f2519cc9cfba
-
SHA256
4c5bb849aed0389ee9177c8f64a79bba33446047f66fa08482345a72b99b6e02
-
SHA512
6b3e63fb1e219ba9c2686911cb3572645cd605d83dd4615064842c9b8299f9cdf840cd046419b22d857dedd510c0a7d29aa36528bbc28d1b6573c5170633da09
-
SSDEEP
12288:GS3R868++eKT5i+mCXqElIhlAacekaLeqa:1h868++Tll6Ea8BMeD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SONG_HONG_SOA+BANKSLIP170823.pdf.exe
Files
-
4c5bb849aed0389ee9177c8f64a79bba33446047f66fa08482345a72b99b6e02.zip
-
SONG_HONG_SOA+BANKSLIP170823.pdf.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 440KB - Virtual size: 439KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ