Static task
static1
Behavioral task
behavioral1
Sample
RFQ10211789.PDF.exe
Resource
win7-20230712-en
General
-
Target
RFQ10211789.PDF.exe
-
Size
982KB
-
MD5
3039beddd79bd11085c6964ee49ddb73
-
SHA1
e413fcde6bf23dd725367bce0a7eefd7f0b941c1
-
SHA256
ab6012b8dd5d9fdd1d630fcba7ab154de3fac3fc0a8d4b6fe1d9dd6b149b9563
-
SHA512
4e46d072da6e6054e7d77500f73fb5ab69afa28f40828a278ce1dd6e143f37ba2cbbffd2c4210c93c4bb60cea566fa9883b0121c3a0d8885245b26406adf2bda
-
SSDEEP
12288:+v//iSWrnt1Mlz+f15L5psOWGGOAje2qca7kSAGeiJxkNkkMQ:+PT6nt1MhS7L5HWGqjePkSAGefz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RFQ10211789.PDF.exe
Files
-
RFQ10211789.PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 977KB - Virtual size: 976KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ