hpfK.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PL -quote PDF.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
PL -quote PDF.exe
Resource
win10v2004-20240419-en
General
-
Target
1c09479b2d3d5478750179bd8a7ddd870bb472ec554adedb4cd49e7b0082bb91.rar
-
Size
736KB
-
MD5
ff9342fd4f145fa082b89894163dba98
-
SHA1
eb9a750ab0a62604c17f289c8d8b4ef9149530a4
-
SHA256
1c09479b2d3d5478750179bd8a7ddd870bb472ec554adedb4cd49e7b0082bb91
-
SHA512
dd963317850a25dd354baebfd6fa12b84e0a620fafa8460dd6d977ec8a29e188813f24922b43f5a94e02b61415af684be9bfb3b49092c703e119727c68105357
-
SSDEEP
12288:kUem+yGC21jc0U8rVEvz/mdFfMJD2Oe9DCIZ25lnbelqzbmduDL:ymuvc0Rq+MJDhkGNlbelqPmduDL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PL -quote PDF.exe
Files
-
1c09479b2d3d5478750179bd8a7ddd870bb472ec554adedb4cd49e7b0082bb91.rar.rar
-
PL -quote PDF.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 768KB - Virtual size: 767KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ