Static task
static1
Behavioral task
behavioral1
Sample
IMG_Escan0002024-PDF.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
IMG_Escan0002024-PDF.exe
Resource
win10v2004-20240412-en
General
-
Target
eb344514baf306e3f55aef8ced3ef9836cec8c8d2092b2d0d136b926d47bb8a1
-
Size
606KB
-
MD5
09289be848543c732b1582f16141d779
-
SHA1
7581296907f5384cce25fa321616ba47f5975e84
-
SHA256
eb344514baf306e3f55aef8ced3ef9836cec8c8d2092b2d0d136b926d47bb8a1
-
SHA512
19b4bfd2db4e63d25634dede2cdec4f7d5de384d931d7d6cf7021385aea0fe13400186d16b2af17bfcc97c65cce6a0e947d2b6cbd6eab520a1fb022f8dcbac06
-
SSDEEP
12288:L0rDhr9tieE8LGFshgESeUCA5CBnDCOXJmMK22+gFXRYzfEvf1wdoJSXhm1KczC:89rLddLGFs2EtAAv5S5FkfEDslsC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/IMG_Escan0002024-PDF.exe
Files
-
eb344514baf306e3f55aef8ced3ef9836cec8c8d2092b2d0d136b926d47bb8a1.zip
-
IMG_Escan0002024-PDF.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
__MACOSX/._IMG_Escan0002024-PDF.exe