Static task
static1
Behavioral task
behavioral1
Sample
PO454323 Pdf.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
PO454323 Pdf.exe
Resource
win10v2004-20240419-en
General
-
Target
PO454323 Pdf.exe
-
Size
742KB
-
MD5
d930a7ad8bc7aa31074f9a21e44c44d8
-
SHA1
690cf6d1211141cefc0a82bc4141d33db1552eeb
-
SHA256
45cd99dffd321a839a3b9406f54c4c05a3076a9c7b71d50fa1c96c7cf3a78deb
-
SHA512
9a614f1d89666c904707d6220bce8cd745c2aed8a7d7bb853e0cdb526276814f14c02b6149f4033aedb344d04834f0d521564a572a00ae3d838cb510046ed1b5
-
SSDEEP
12288:JXb056VD6w6ZNAh8bZZCCGANWn9uVldHOvTNCXK9KWlP9bg+IQl5S5pEWupD9:takqM8bZZV/4nWldHmCXKYWlVxjqEVpx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PO454323 Pdf.exe
Files
-
PO454323 Pdf.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ