Static task
static1
Behavioral task
behavioral1
Sample
#009012 Order_Requesting Invoice.PDF.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
#009012 Order_Requesting Invoice.PDF.exe
Resource
win10v2004-20231023-en
General
-
Target
#009012 Order_Requesting Invoice.PDF.exe
-
Size
637KB
-
MD5
6f56ee2df97b5417ee3875db22f54e49
-
SHA1
daf9b37474532f8fdcf8310567852a79cd73b77c
-
SHA256
3230ec344a2ed748c97ea46b2d41a09521bd4f67e605d53384f741eece09f466
-
SHA512
5414251af69a0afb2900557039da99ca4e1c02e6197854f84525f4c76fb451e7b7cfcfad8f8a00f9f886f8d8904969e2db1d6eeb1f66932ce5286489e3644f59
-
SSDEEP
12288:sDWBAgYx/dy2i++vVYK2cr2dUjXe3Jnp2tbhqr5V8DNc7:PBRY5ySKkMiJp2B0ANc7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource #009012 Order_Requesting Invoice.PDF.exe
Files
-
#009012 Order_Requesting Invoice.PDF.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 617KB - Virtual size: 617KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ