Static task
static1
Behavioral task
behavioral1
Sample
RE.Documents Purchase Order products 23100290683v pdf.exe
Resource
win7-20231023-en
General
-
Target
RE.Documents Purchase Order products 23100290683v pdf.exe
-
Size
536KB
-
MD5
646d8eec77ad22f3736542618cca0039
-
SHA1
3cfff1e1e7dd6a71ab5998824a445ec1f2a1037c
-
SHA256
81f680191094ca2497c7798b37b83009157a7201dc0f27839c2860d5eb968fd1
-
SHA512
b7e351d15dd9315972e7bee945084b9b77b43a03d0e934fa383cf1958dda85e45dd494bfdf6f3bac1b25450f16e16d71bc5be8adb90c3f3b6a2072054b3d1996
-
SSDEEP
12288:sGpcNvgd+bvGA7/+ZvoCStM4ETYtOIvAMWBCFsALl66yY:sGSYdjXgtMb8tO+7Ll6g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RE.Documents Purchase Order products 23100290683v pdf.exe
Files
-
RE.Documents Purchase Order products 23100290683v pdf.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 528KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ