Static task
static1
Behavioral task
behavioral1
Sample
statement.pdf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
statement.pdf.exe
Resource
win10v2004-20230915-en
General
-
Target
e79cbbc967c6a20a8365a2b901449e329adad4b7c24b9e934ad9144e681d27e4_JC.rar
-
Size
529KB
-
MD5
8ac8e2df9c402164be41504c212f4fb7
-
SHA1
bfd5568e22cdf0e2427bd1064d83852f3b9bd8d3
-
SHA256
e79cbbc967c6a20a8365a2b901449e329adad4b7c24b9e934ad9144e681d27e4
-
SHA512
ff696d005900083a9fc7e6b5242c824bfc4b77ca3b28e61b658d12d61ee5b7fdcdb8d519019c2f6bdd3479a1bf28c49940012ec94b39ab977d357169804c7bf1
-
SSDEEP
12288:CPEs6ZcTby48D2x8+YobK3+awIXxP5k2Zx86yjjrbgrsvE0cS1tF+RyE2:Ch6bD/OaDX1Z0jrk9JaFZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/statement.pdf.exe
Files
-
e79cbbc967c6a20a8365a2b901449e329adad4b7c24b9e934ad9144e681d27e4_JC.rar.rar
-
statement.pdf.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 536KB - Virtual size: 536KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ