Static task
static1
Behavioral task
behavioral1
Sample
Agreement ATC 02443 .pdf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Agreement ATC 02443 .pdf.exe
Resource
win10v2004-20240226-en
General
-
Target
0d0f7a5c2dea296565178464e05ec488.bin
-
Size
636KB
-
MD5
978db8e8a1903bbc5501e3d1b4f64f88
-
SHA1
e5cad61093e6b2459d3dce7517bbcaba7001c634
-
SHA256
be7283189dc58a539c8601134f4b55b44f8f278b0de63055a8ff497a147fb8b1
-
SHA512
5db0a9404d3e8fab9544da9366d0a516856beebe0db76be79996624f64f5a69f0b7eebfb2b88e28b7c64d0a3b473805bccff912aa23d71bfb9e4edd93fbec761
-
SSDEEP
12288:FBTsFS5RR5B/r8xQB7m+VL6+R/ONSjdZa6Ul2UUm9pfBkDFz1lmfGotak7:FBTh5f/r8WB7mpluZ7IprBqz1kl5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Agreement ATC 02443 .pdf.exe
Files
-
0d0f7a5c2dea296565178464e05ec488.bin.zip
Password: infected
-
be262b4a9cbad86462792c7a786b4041ee6b0123f884244693ede9d3174ee906.r00.rar
Password: infected
-
Agreement ATC 02443 .pdf.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 833KB - Virtual size: 832KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ