C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\HFayo\obj\Release\HFayo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3rd Shipment schedule & packing list of NORDLEOPARD V.413S.pdf.exe
Resource
win7-20240221-en
General
-
Target
3rd Shipment schedule & packing list of NORDLEOPARD V.413S.pdf.exe
-
Size
887KB
-
MD5
5e97128566cff7e1034354b15c7a7da2
-
SHA1
91a8e8b0b62d4351c5784b05cfa23c88e3754857
-
SHA256
b22dc0520dd01d9cef4d17bec287e31888c33ddb1ea755f595217e8b51a6b6a4
-
SHA512
e2d142744824470204d37f319d36afb6fe675913aa724b575f93b7c7af4ec1cd81c50b78961227f4359cc202886834820401b58575bc059c5e76857f1a0190b3
-
SSDEEP
12288:oprmPR7zzVIvfmNaltf9ATmiaddbRpnJLxurtIIxARnAuNHnzrH6j6FEveEOESe0:zprcmNaltf96Nanf9x0elrHVZ00
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3rd Shipment schedule & packing list of NORDLEOPARD V.413S.pdf.exe
Files
-
3rd Shipment schedule & packing list of NORDLEOPARD V.413S.pdf.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ