Static task
static1
Behavioral task
behavioral1
Sample
Payment_CID212524.pdf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Payment_CID212524.pdf.exe
Resource
win10v2004-20230915-en
General
-
Target
Payment_CID212524.pdf.exe
-
Size
828KB
-
MD5
e88af2c7dc5a1be6d6c0b487f4a8d102
-
SHA1
e7891e004245822b47b3e7f1a91cf5d6da8838d6
-
SHA256
1d8f8c0fbd9dac51aac1beb76631ffedc1aeae0e7a2554a99cfbcdf0a7b2b96d
-
SHA512
dc81f59fea7c533d80751845454fb55f5284eca48233e0a41f43583d3934c84ab2a96342ae157b911e546b38084b182f4ea843366605837b6018eefd3a85a370
-
SSDEEP
24576:L8YHy60xUUkG6nn7HxDCKiOrsCg/j4dus1z13ag3:dRG6djsC+jGus1zwg3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Payment_CID212524.pdf.exe
Files
-
Payment_CID212524.pdf.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 807KB - Virtual size: 807KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ