Static task
static1
Behavioral task
behavioral1
Sample
Transfer copy PDF.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Transfer copy PDF.exe
Resource
win10v2004-20240419-en
General
-
Target
Transfer copy PDF.rar
-
Size
680KB
-
MD5
4bd43116dfe7a941d0db8db018c96275
-
SHA1
a2ec98b52a7bbaa501a48d7f112e55e7e33a8f1c
-
SHA256
25e6d6bb3957a044d8ebf44f310b34edfc1ef909afa84529664c78a70af8d7a3
-
SHA512
3bfcb8d50476658c635c3280038c9ff81c685d2d31b5db12262703888735b716891a87e85b1b8428c5d827df5bdb01ac33d75c57118317a44686af1d8252d846
-
SSDEEP
12288:xWEGJXJC7Azs+BhR44BsJowbypn9Dcip8iYbvyyPhokFHPV3/v+Dpbv/+rhn1n88:g5R9syR44Qowmt9DZEOyPlNvmDtGR88
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Transfer copy PDF.exe
Files
-
Transfer copy PDF.rar.rar
-
Transfer copy PDF.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 700KB - Virtual size: 699KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ