VvIq.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Payment Advice.pdf.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Payment Advice.pdf.exe
Resource
win10v2004-20240419-en
General
-
Target
dc47398ae3a75687b405326b3b7a68d1.bin
-
Size
665KB
-
MD5
d95ee60e88effbeecd899a2173e40296
-
SHA1
1a9383a1806527cf82b7e50b3ae00831b8e4e7ab
-
SHA256
5e510fc61ea0fa4c19313c760dafc9afb8bada350ad2b9475494cbab5881fa22
-
SHA512
37b301ea5ea149382398b85fa9bcccfc9c38a760dfd10ce82ae83825fe1d7f4979480be88e8f41cfb06538243a1e1527c89cf73ad0e1d3a3856089ee793f29b9
-
SSDEEP
12288:v+kkWHFZJVohaiiMOlwqVgRvy1Jb5238RCdhvP+Y3pZntAIJX1ZKpWPjksL7:vxkWHf8hI5lnv1JQL7TX2pWrhL7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Payment Advice.pdf.exe
Files
-
dc47398ae3a75687b405326b3b7a68d1.bin.zip
Password: infected
-
5a861a0689844632ad0552e90d0ef57aad63bc500b5a8ad07124fe21426eefdd.z.rar
Password: infected
-
Payment Advice.pdf.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 692KB - Virtual size: 692KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ