Static task
static1
Behavioral task
behavioral1
Sample
S25C pdf.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
S25C pdf.exe
Resource
win10v2004-20231023-en
General
-
Target
9d5b16cec4adee050662fe393ba2b711.bin
-
Size
602KB
-
MD5
3a38bc96614ce0969168dc9dd89e3fb0
-
SHA1
4e9f5cab21135f7beb7fe1df8e3b915bac913d69
-
SHA256
d403a8ab677f2a626d43be542c69c65fb3160112f5d7631c6ef633f957bfefcf
-
SHA512
b4cc2aad6027b2516fe5ef5ca89a9d693bfd2f0d03ad3889fa205d97f1038ae58e2a56a333dcf2cc5514cd51ef51bb1ef129f75acfefa902770fe2bd73efc4eb
-
SSDEEP
12288:twnUN/uIdW03bRA4z+xJYxi+1IJheGaAcbqM1tunzp8Q1RwyBcs3:qUJu0NA4qui+1o7tcbqotunzp8Q13ac
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/S25C pdf.exe
Files
-
9d5b16cec4adee050662fe393ba2b711.bin.zip
Password: infected
-
b4c242f61625ce4a80c3f99579bed1f25f876f0d28c2bc1f72e884704a168fd6.zip.zip
Password: infected
-
S25C pdf.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 828KB - Virtual size: 827KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ