Static task
static1
General
-
Target
Pdf file.exe
-
Size
3.2MB
-
MD5
c0c6af26592b29e8e52c814df3da9619
-
SHA1
07699390b1c2a8f6758e88da1758e59cb2931006
-
SHA256
86db3fca533a14f66c85f2a7c85e9ae15b3009950d5bd49fa6479e6c057e3ed0
-
SHA512
f58c9d260141b4392dcd660461527f2bbfbc748fcd7b53384800401c1a85e9d05bbdb0c897c9a0311bfc80055c6d8ecf3f074d15a7ef81e6a238b583410496e2
-
SSDEEP
98304:XJytsSU4qBTkPEV2CksXFw481LB/orB7n1Zrdo4:MtLHqCMV2C9QLlorJ1ddT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Pdf file.exe
Files
-
Pdf file.exe.exe .pdf windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ