Static task
static1
Behavioral task
behavioral1
Sample
O8A-1708AA MV FILIA – RFQ 6500077779_pdf .exe
Resource
win7-20231129-en
General
-
Target
6d8db9e8dab622981cf2c1a313397392bef03b5f450d8829ed207c9146f7d7e6
-
Size
518KB
-
MD5
470d9c76cc4cf1e2523b30d06819c8b7
-
SHA1
4ca95089d2a4b7f34f22451a67be12ff57ca749f
-
SHA256
6d8db9e8dab622981cf2c1a313397392bef03b5f450d8829ed207c9146f7d7e6
-
SHA512
fc67664e1a17b4ee2a35850f5e64c143b8f8f5eeed4a71c17c84f28bf4131dac89cd67034bfbf0b2306b4f6c7c35ccc44b3bbfb9fead21a5e42170195c825fa7
-
SSDEEP
6144:p/Ups9XeHW75i0LGIb8SVONSDf8kQoznJGFD149QpCwp:p/Ups9eHW75cygkpLJa49QpCw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/O8A-1708AA MV FILIA – RFQ 6500077779_pdf .exe
Files
-
6d8db9e8dab622981cf2c1a313397392bef03b5f450d8829ed207c9146f7d7e6.iso
-
out.iso.iso
-
O8A-1708AA MV FILIA – RFQ 6500077779_pdf .exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ