Static task
static1
Behavioral task
behavioral1
Sample
OQ 23041121pdf.exe
Resource
win7-20230712-en
General
-
Target
f4c8d85bdabc9abade84b86cf296ca5dd8d8f6949496f990e9db6f1ff20a8e0f
-
Size
624KB
-
MD5
1c339ee3175fd2971750417ecb3afdfa
-
SHA1
acda679a7edbde76b4e2b8eb30e8e28db8c5f5d8
-
SHA256
f4c8d85bdabc9abade84b86cf296ca5dd8d8f6949496f990e9db6f1ff20a8e0f
-
SHA512
23ef0eb20ef3152d02695d2cc01ae96e4440e540814b17549027f4e6ddd4d7dc1dea57837810ce863e18a24738876a066105d4fc4ce64e029589f873264a7e76
-
SSDEEP
12288:TFeI9aizXb9TwaaKA61mqal+4M6g55bCcqY2os0nESHLNd+DmdaGR9kIzxJg3mdj:b9z95PA60qal+J5WcqY2FZSr3ln9kIzL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/OQ 23041121pdf.exe
Files
-
f4c8d85bdabc9abade84b86cf296ca5dd8d8f6949496f990e9db6f1ff20a8e0f.rar
-
OQ 23041121pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 733KB - Virtual size: 733KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ