Static task
static1
Behavioral task
behavioral1
Sample
SC_TR11670000_pdf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
SC_TR11670000_pdf.exe
Resource
win10v2004-20231215-en
General
-
Target
SC_TR11670000_pdf.exe
-
Size
698KB
-
MD5
50e6c1fd1192140fa9b7c80529b2b2c0
-
SHA1
afbec66b7f54c309b12eb5a08c2b2fd9793ffa52
-
SHA256
7561ebfa684d46a2c14472ab64b2151cf10aa42a109677f7df957c2271054a5f
-
SHA512
2b77b02f90500a8e8cc90dcb047e79e1ca6777a55730b5a722d4ebce6b86e60958d50d1d5332d994a83fa498d7eb02da08587ff0cdc0b925b8c6cffbab7eee35
-
SSDEEP
12288:qv0R0MuzbDPorTgi/6Mrscq/rZr4wRE2JF1f7wITyF+ZdtnT:qMOMu/TiTgs6cc4wRE2XiUkUt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SC_TR11670000_pdf.exe
Files
-
SC_TR11670000_pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 690KB - Virtual size: 690KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ