Static task
static1
Behavioral task
behavioral1
Sample
Debit Note.pdf________________________________________________.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Debit Note.pdf________________________________________________.exe
Resource
win10v2004-20230915-en
General
-
Target
Debit Note.pdf________________________________________________.rar
-
Size
544KB
-
MD5
2e85adf38d7813ba3ab6d2b3405dfd32
-
SHA1
82466ee676744b31802d97ceb5c708a1f7281ca8
-
SHA256
d5276411acd4deb25140faf4a84addf56cc1b0b3942d6b999fca2af749afba3b
-
SHA512
abebea4cdc6a1736ae54d6b4eb46ec88ea32ae8e079e698e578f681b4e53bcc01ae82541ed1758151d1f31d313ddfd4274107ef64b06d96355a476b2930a7a57
-
SSDEEP
12288:dquUL5L3AGQJsdRjiQ5kjii6WKeYV8hsD7S/v9hWGo9uewFQRP7dM:dqnNctOgi3j8hQU9S9ueJRDdM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Debit Note.pdf________________________________________________.exe
Files
-
Debit Note.pdf________________________________________________.rar.rar
-
Debit Note.pdf________________________________________________.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 609KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ