bBFSZ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
VN24A02765.PDF.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VN24A02765.PDF.exe
Resource
win10v2004-20240412-en
General
-
Target
07d3f2f958e82a58b9e3b8495eb3ab41.bin
-
Size
781KB
-
MD5
2057481a26d5917c636b515382a5f557
-
SHA1
38ac024952cf8954e92795349952c01ae4691879
-
SHA256
80d2573ce89d6fcd839516ddee88610e43053754d6afd5f3818fa17e16125654
-
SHA512
7eab379b43ab5a7fd71d0ecb05058c0536ec686713606a0ce77e19a783fd98d821935f7d80cb4783646f42c01bbad465f9cfbcf1820c410b3086fb0ff8ec050b
-
SSDEEP
12288:s59wDX/a8ph7ulsPtSWAhDoEQxdFXbSL/7f0oVNCyYrdU8PXM8VC1jCZGORc6nTb:WMos3wP4FLSkoVYTFMMCZCZRRc690e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/VN24A02765.PDF.exe
Files
-
07d3f2f958e82a58b9e3b8495eb3ab41.bin.zip
Password: infected
-
fb1447788cf9ef8bfc657fa50dfa5b7a65088d19cdde62416003faf6d654c2f5.rar.rar
Password: infected
-
VN24A02765.PDF.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 991KB - Virtual size: 990KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ