C:\Users\Administrator\Desktop\Blueprint\obj\x86\Debug\Blueprint.pdb
Static task
static1
Behavioral task
behavioral1
Sample
AlhadbaniLLC_Product_Request_as_drafted_by_Procurement_Unit_PDF.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
AlhadbaniLLC_Product_Request_as_drafted_by_Procurement_Unit_PDF.exe
Resource
win10v2004-20240419-en
General
-
Target
776d1d3c03ad9f6c590a739d5b4b5374.bin
-
Size
6KB
-
MD5
0650be7a3e7e1c2e3678ec67544f7fa9
-
SHA1
6a2a1824d75726b96b023f4ffe4a0a8cd55b2066
-
SHA256
ed79f85d9a24f980e46c1f89875f1c2a7d79c6c196bd087ba5f63af5a823aba7
-
SHA512
769e31c1b0d9a8adeb3836b3c1c09b68d252b7f3bdea053fe7709a2ae8abb3ae54a449be1864bfc3f030dd84a644f2c37c0bbb78a1b8ffe8d298309c14594945
-
SSDEEP
96:fwfRbEbZwZoq3DjBgGWURB3uSkvRb2lwNYqC0yffFyKUXiC7U4SkeqpnI1ztS5MS:fORo1Dq3pbtalks144OenI1uMQMoH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/AlhadbaniLLC_Product_Request_as_drafted_by_Procurement_Unit_PDF.exe
Files
-
776d1d3c03ad9f6c590a739d5b4b5374.bin.zip
Password: infected
-
94e04981d002635257531731be14a79bfd8a45be434c0b8be3d5caa4cac1bec4.zip.zip
Password: infected
-
AlhadbaniLLC_Product_Request_as_drafted_by_Procurement_Unit_PDF.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ