Static task
static1
Behavioral task
behavioral1
Sample
INVOICE & AWB #5291760_pdf.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
INVOICE & AWB #5291760_pdf.exe
Resource
win10v2004-20231023-en
General
-
Target
fbbf0afe6f04d00af908b9c95a877bdd.bin
-
Size
741KB
-
MD5
fa9b4a0dd63c1df79b7674eeb528b0f0
-
SHA1
8bf7a97ebefc54f19d6fda2d9c74185af5242efb
-
SHA256
ea12cd27c6a9a2eccc1001c92ae88547e2ff6dc361019416bc7c4232efc1bf47
-
SHA512
87aa464c1b13644b68b657c15ecfa3542c599b45baa3c08f96d125937858431bfa37b7c47a29b9596105bfd7d277c80b3c7c2c6cad3b6ff9bc383162179e4597
-
SSDEEP
12288:/O2mLfPSFTcLkYlbLkqDnrAFM9g1/S8vtyPAJar7wAHU8Ivu4VD+dEpK954QXiO:WHf6AkukC8FM9g1/nvt4579U8cZVadis
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/INVOICE & AWB #5291760_pdf.exe
Files
-
fbbf0afe6f04d00af908b9c95a877bdd.bin.zip
Password: infected
-
c9187e5fefdbdc524ac4717a0ec388a666a8cabbfa271ccaca17bf9517e1aa94.cab.cab
Password: infected
-
INVOICE & AWB #5291760_pdf.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 923KB - Virtual size: 923KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ