Static task
static1
Behavioral task
behavioral1
Sample
INCOMING COLLECTION D-A ADVICE.PDF.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
INCOMING COLLECTION D-A ADVICE.PDF.exe
Resource
win10v2004-20230824-en
General
-
Target
INCOMING COLLECTION D-A ADVICE.PDF.exe
-
Size
751KB
-
MD5
79bcd6ed9081b8388cc2f8e26afd798d
-
SHA1
af6d0c3f08adfe8be72017f2315f45854f334e23
-
SHA256
ac69b48787302afa53641d88ea384c6aff213692d4ffdf9963144ae1dd8c44bd
-
SHA512
73d6ad935c7f1c4096db52228adb03b8f1127ba0eace36b1b9bfad87ef2f140db325427633322ca2c31e2b225266942b967f04c62e599efe467a1928809deb59
-
SSDEEP
12288:8chcgOS5B/bTClakx98lyMe8iN4ShYkcbiHYKJ84eaakUHw9U9cJUhRcOJ5c:8c3OQB/ClVP8lyMe8iN4ShYkcbiHP+4e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource INCOMING COLLECTION D-A ADVICE.PDF.exe
Files
-
INCOMING COLLECTION D-A ADVICE.PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 749KB - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ