Static task
static1
Behavioral task
behavioral1
Sample
CI-23JC0607.pdf.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
CI-23JC0607.pdf.exe
Resource
win10v2004-20230831-en
General
-
Target
03d5470357563cb437c1cc0582fb0c8b.bin
-
Size
786KB
-
MD5
52a632378e56e858ad3857ebc4d16318
-
SHA1
69daed55f581b51ca86ad32e310b061dcd53d9d2
-
SHA256
643e3805fe30a502e3ae20a921b758344c509aa308890a6493ed8c24cbf2cb14
-
SHA512
1a1b0be08e1cbc7fa0275cef48322aedec0cb8e71843549ae8e6a4f0be00f536f77a87abb83bb75ec746f572ac8dcc79711fcb44e6dbd626f469be144804d5cd
-
SSDEEP
12288:c2EvoIo9dhBojY8DoyUKWTNuzGKtlys7aRhqWC6MUq0R0xwjRfJGb0umB:DOox9dhBV8DoEealxGvrC6i0R/jRfNv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/CI-23JC0607.pdf.exe
Files
-
03d5470357563cb437c1cc0582fb0c8b.bin.zip
Password: infected
-
368cf5c96775b8146bd628f6798e6938239fbb27062a34920453749528c417a2.7z.7z
Password: infected
-
CI-23JC0607.pdf.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 758KB - Virtual size: 758KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ