Static task
static1
Behavioral task
behavioral1
Sample
pdx-td16.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
pdx-td16.exe
Resource
win10v2004-20231215-en
General
-
Target
62d5d11f70660dda4dc5d0bda83e2af6
-
Size
47KB
-
MD5
62d5d11f70660dda4dc5d0bda83e2af6
-
SHA1
7288dd09d661483472d7a8cfc104a5b2befe1218
-
SHA256
e0f23d20a2303e434b89cbf5e1a2bd4188a0cc30071d021040271ed646ddf3d5
-
SHA512
3e8c56ea251ee259d3c9638f78bd1bc7b9af6f4032a4212fc92f2b717382127f15ffa8f0534987690764dd4c72711c0cc22f7a2eb51c90d3c304d936512172b8
-
SSDEEP
768:ctv+lbrJfaGqzHX4O4KQaOo8OjLDZ+LsgMrX7SqvAj/zpQJFLIle2pBtIsW:ctygGooOsbWjLDZV7LvA7iJFL2/W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/pdx-td16.exe
Files
-
62d5d11f70660dda4dc5d0bda83e2af6.rar
-
9down.jpg.jpg
-
Paradox.nfo
-
pdx-td16.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.PDX Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PDX Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE