Static task
static1
Behavioral task
behavioral1
Sample
Statement Of Account.pdf________________________________________________________________________.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Statement Of Account.pdf________________________________________________________________________.exe
Resource
win10v2004-20231020-en
General
-
Target
7838f229ff549744a0fb495bca7ada73.bin
-
Size
940KB
-
MD5
74680d5e44b23ea4d9a2e1ee1f845933
-
SHA1
0f8843c886de3b8eff499a7b75e2944a5bb1197c
-
SHA256
56ed6f208d2c214c09ab3afebccc0692a694c2db0c9012665d78837ecaa90fec
-
SHA512
da3caeeab16e26f862b68a97e1e4f183f270bb8900541d9f48995296bd96b0a51c265cb9cf6cddf0f3e7375b3e3569372ff44b859cd327764796c24f7daa9413
-
SSDEEP
24576:F8hmCbGi90fsbN46jPNvGrHmTwvhshypPOkWDJUSsX:GGimsbO6jPNvZU5sQPOkWBsX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Statement Of Account.pdf________________________________________________________________________.exe
Files
-
7838f229ff549744a0fb495bca7ada73.bin.zip
Password: infected
-
8e71f00b676e19917d8a763ffb606fde51c864ded8ca7989bf5046a176ccc467.rar.rar
Password: infected
-
Statement Of Account.pdf________________________________________________________________________.exe.exe windows:4 windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ