nVlW.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Inquiry Doc2pdf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Inquiry Doc2pdf.exe
Resource
win10v2004-20231215-en
General
-
Target
Inquiry Doc2pdf.exe
-
Size
732KB
-
MD5
cc9320801a411bae88d4293006f8fdd2
-
SHA1
00995a1f3b4f14ffc260f17a9d2294671832b861
-
SHA256
5a948b605fbabb59ea28244fdf05cc6980a82057fa1cc1138a1cba3569b9a294
-
SHA512
eb0e0f52e30c33613b86a4365af8134acb03d6b1c9c0310ea439da0192f79e8d7380bb10cccd81fb917e6979e6fc59c2809473d54df47ca9da458a475ad27c3b
-
SSDEEP
12288:LdTKGZrAHW3XVcJsWcv6QL8B2rA4tO5yoEZSsc2RUzSZQ1HkLdU+0bS:L/SpHcv3rAeO5VEIscnmyb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Inquiry Doc2pdf.exe
Files
-
Inquiry Doc2pdf.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 730KB - Virtual size: 729KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ