C:\Users\Administrator\Desktop\Outputs\ioNOoQuHdeywEt.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ORDER_INQUIRY_PDF.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ORDER_INQUIRY_PDF.exe
Resource
win10v2004-20240426-en
General
-
Target
b8d6ff46309ca17651ebe70e1b648b5266b1285b132d1e6894a589c0f852c583.jar
-
Size
137KB
-
MD5
f369579943b1b2eb99f181bfd1ec9ee1
-
SHA1
8542615dc9549a829fd4083c4d92008b61611ed3
-
SHA256
b8d6ff46309ca17651ebe70e1b648b5266b1285b132d1e6894a589c0f852c583
-
SHA512
f179f636582f1a9afef6c3328d7b430b51572429c655c96a6c642b4e5b5dcf59f089a97c2f6e7a630433d1620cde78781aa09c66eda28ea38f5a1d03021508ba
-
SSDEEP
3072:9iwxL5G6715nxCz9e0/A2n1MzfbBMYy1+j93JyOc0kp4/AbUw4/p:LxFG67TxC9/ASiDScJy4qbUw0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ORDER_INQUIRY_PDF.exe
Files
-
b8d6ff46309ca17651ebe70e1b648b5266b1285b132d1e6894a589c0f852c583.jar.zip
-
ORDER_INQUIRY_PDF.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ