Static task
static1
Behavioral task
behavioral1
Sample
HESAP____________________________________________________________________________________________ BEYANI.___PDF.exe
Resource
win7-20231215-en
General
-
Target
HESAP____________________________________________________________________________________________ BEYANI.___PDF.exe
-
Size
942KB
-
MD5
1d35f5b9450b5481ae0e303da85b3cca
-
SHA1
3da2dae00338c3312778df4c35ace6121d62eade
-
SHA256
9d72ce2b96230793c01a4628b5f8aaea6b0d7021c0806b23cf5c2747dd9a232f
-
SHA512
ca15112432e80d00be1874847725f15fc3dbbf82cd74de0f9ccd65cd9441c1c7344bd76e901a12f35243b6beb6519d47dc3643b08a75fa1c073fc416318f6854
-
SSDEEP
24576:VmPgjjN179c11+Sb0L2HFZriiuEkwPQd2B04s/:35rI1+SALUXeif7PQdx4s/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HESAP____________________________________________________________________________________________ BEYANI.___PDF.exe
Files
-
HESAP____________________________________________________________________________________________ BEYANI.___PDF.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 939KB - Virtual size: 939KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ