Static task
static1
Behavioral task
behavioral1
Sample
PDF_PO Nr 1123.exe
Resource
win7-20230831-en
General
-
Target
NEAS.c2ca57b0c163901e4a022e4d4c6beca7333f2537adaaff4160e7eea06ad5ce29_JC.zip
-
Size
621KB
-
MD5
901ff20be0ad22ebd15bd6ecd5bce3d0
-
SHA1
fec06560108e42b3ba1d4022e807f9cf16984620
-
SHA256
c2ca57b0c163901e4a022e4d4c6beca7333f2537adaaff4160e7eea06ad5ce29
-
SHA512
7fb4b04309ee166fe13e59871ffdf711abef133d19c48d0449c4110b547d8d9b088a2e0a527d2d8c7476119516bf298ee4e49633c1bad15a79ceacc7a932eb2d
-
SSDEEP
12288:MZ4OjTLaZ1w6ziDjj55zxqlOQU4/LBKUN4QZSkq:MZ4OjTA1jiDv55zxF4zBpZSL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PDF_PO Nr 1123.bat
Files
-
NEAS.c2ca57b0c163901e4a022e4d4c6beca7333f2537adaaff4160e7eea06ad5ce29_JC.zip.zip
-
PDF_PO Nr 1123.bat.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 669KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ