Static task
static1
Behavioral task
behavioral1
Sample
ATM Dekont E-Maili pdf.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ATM Dekont E-Maili pdf.exe
Resource
win10v2004-20240226-en
General
-
Target
ATM Dekont E-Maili pdf.exe
-
Size
23KB
-
MD5
06e960d5dcf4067db7ebfd23247b8d1b
-
SHA1
26d1a7874a8485ad2a87dcf5ba82430e3bc6f89c
-
SHA256
f475c452bf630f372bb7f1f10372c8fc95874a0a19e432586f7fb555be8646be
-
SHA512
fc60027e20b19e1c332f111811d081cabcfb26f31a89e589a885cffc8d40df62ab6888959e5a3d6df4a92bff42b9dcb3f79b21b2a89c2a5d14a48a6e0f1220f3
-
SSDEEP
384:tf/ssi7KWTHNPnbn+b/AeH9F9wGjEnAthCSGFq6c:1YBPbn+rLXiiEneCLFq6c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ATM Dekont E-Maili pdf.exe
Files
-
ATM Dekont E-Maili pdf.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ