Static task
static1
Behavioral task
behavioral1
Sample
invoice overdue.pdf.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
invoice overdue.pdf.exe
Resource
win10v2004-20231020-en
General
-
Target
invoice overdue.pdf.exe
-
Size
953KB
-
MD5
3c288f869290db9a0a736599823e837e
-
SHA1
6ac8d55163b018275e32d7478f12b41926e48268
-
SHA256
f112d1e7c8414255846131a14109ae12e45ad65296bd014601d0a83c9ea90cb2
-
SHA512
ebf3d226026059c053b5787f293e7d1b7c89c56ebe1ce13d0a43b1c235e73537302b3f9a8d267257f88128a7fff5380a838efc7544e27446ad86e049a6f7e916
-
SSDEEP
12288:/IL5VcLYuPliBSpZAWzpNHP1MBkw9Jj6kKAQQtmxIlL5cjQUgjW9WB/P7r9r/+pj:85Oj1ZAWr4Jj6vA7UIh5cjojEC1q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource invoice overdue.pdf.exe
Files
-
invoice overdue.pdf.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ