Static task
static1
Behavioral task
behavioral1
Sample
RE Quotation 038 & 068 Revisi Xerox Scan_04092023092646. PDF (~437 KB).exe
Resource
win7-20231023-en
General
-
Target
RE Quotation 038 & 068 Revisi Xerox Scan_04092023092646. PDF (~437 KB).exe
-
Size
544KB
-
MD5
bafcbd6815e0c884f7db38a7b7ebfa78
-
SHA1
cb1946c5e7ab265517915e7ff32a5b4816b90086
-
SHA256
a508300450c0571d787b52844638d0b9a05f0e6c6dbbdb3a9e054f8406446af2
-
SHA512
6b3ec43c57bf302f2bdf80c1c3a1e309ce316c7261b1397038c9ecfc48fd565654c6b7646f2a361e34da9c50c02cb885ca0763f1c77fb3479c018a6fe7ae9e63
-
SSDEEP
12288:FWjio/ENcfogwyYt7RaTPx6zFd7BR6wT:FWjiGzoxtdmZ6zFpB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RE Quotation 038 & 068 Revisi Xerox Scan_04092023092646. PDF (~437 KB).exe
Files
-
RE Quotation 038 & 068 Revisi Xerox Scan_04092023092646. PDF (~437 KB).exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 534KB - Virtual size: 534KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ