Static task
static1
Behavioral task
behavioral1
Sample
SCAN COPY 00937782.pdf.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
SCAN COPY 00937782.pdf.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.169c317f8a6116494d43ac12b84265c0.cab
-
Size
583KB
-
MD5
169c317f8a6116494d43ac12b84265c0
-
SHA1
591ebf9e5e3e10a3bc1cd4155f3f2b8b634993fa
-
SHA256
628f1d9f490fa3978b38d4c9931407a54ee8769954b3f56af052ec07db5b4f2f
-
SHA512
52be2e1f8490f4c3fcf69d566a72cba2b27deac1079bbfdb0a84032351556335c3954c95773e23c131b7fbc7a53c40f659825f6af3a525c27dcbeaf5b16f27d7
-
SSDEEP
12288:k+SQi0UTxk6OImW8D1+Wj0Bdb7dUiF/fwvuvWAg4HfePOU0yVub:Zzia6Os8UWYBdb5UiVu1Ye2a4b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SCAN COPY 00937782.pdf.exe
Files
-
NEAS.169c317f8a6116494d43ac12b84265c0.cab.cab
-
SCAN COPY 00937782.pdf.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 708KB - Virtual size: 707KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ