Static task
static1
Behavioral task
behavioral1
Sample
invoice.pdf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
invoice.pdf.exe
Resource
win10v2004-20231215-en
General
-
Target
29a8f786bc0ecf80d7bafa4217e1a224
-
Size
610KB
-
MD5
29a8f786bc0ecf80d7bafa4217e1a224
-
SHA1
6bca0dc144af01ce39158cccb1a1f2e24591c690
-
SHA256
5410997bdd858dbc071239783ae1dbe6966fcde498dbdfaccd08999637d5ed6c
-
SHA512
cd3ec7a99e0d96f9240091106d85a4f42120483395a7a46e71432a527144953038766a7a2898fbbda36faef3f69f1eb10c6191bad7ff93b7b0e089ef8872495d
-
SSDEEP
12288:iK8ajDkdtDweNktVsFqEQML6304FUEaOyb5B4bCJIXj0be/TtIYIkn7aZB6usLi7:eajDatUeNktVI1L630jOMT4bCJIXJ/Bm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/invoice.pdf.exe
Files
-
29a8f786bc0ecf80d7bafa4217e1a224.rar
-
invoice.pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 817KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ