Static task
static1
Behavioral task
behavioral1
Sample
3496+3497 ORDER FENDT ILAVE,pdf.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3496+3497 ORDER FENDT ILAVE,pdf.exe
Resource
win10v2004-20230703-en
General
-
Target
6390b3ff01d26e0bb47c3a80ceb1fe158ee1809b2fd159dc4097a4488f9f6f4b
-
Size
61KB
-
MD5
8a5cde676d0252d569ffc7c4daf2e7fd
-
SHA1
8682dd2e93093034f33c741d1f8723f48117fb17
-
SHA256
6390b3ff01d26e0bb47c3a80ceb1fe158ee1809b2fd159dc4097a4488f9f6f4b
-
SHA512
bc1ce57c036a2b4bf3cc4affa7cdbb5a76c64f35374663fd50707994082c2aef03062c41a43e0cef143680ece078483ab4b0d5c5b844fce34bcb0ad1857f40ea
-
SSDEEP
1536:qJzxNeAAh/ZZgCdnZX2nn+m78lqVCd+E+dGxsB4h0U+tJ9B8h:6veAAtZZNdnB2nT80VC0E+dGx38Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3496+3497 ORDER FENDT ILAVE,pdf.exe
Files
-
6390b3ff01d26e0bb47c3a80ceb1fe158ee1809b2fd159dc4097a4488f9f6f4b.zip
-
3496+3497 ORDER FENDT ILAVE,pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 154KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ