Static task
static1
Behavioral task
behavioral1
Sample
RFQ DAMMN #578387 Pro-pdf.exe
Resource
win7-20240508-en
General
-
Target
8da91da3693d984fe4f826a596f137fb6e6d8ec1e0b0ccb09cdee983b57f410a.z
-
Size
617KB
-
MD5
1d1d1df3d1a668e8daa51e42c170ab54
-
SHA1
7d2d970c8e83ba869635574a8c04099576a784d4
-
SHA256
8da91da3693d984fe4f826a596f137fb6e6d8ec1e0b0ccb09cdee983b57f410a
-
SHA512
efcdaaf23c8269473783e22cef7e7db6289f304e11497f6cb47bd4e29220ce786f0c9c4171fad066fcaafc91a4489aa16e7be1d1cd3efb3cd7b694766bb43133
-
SSDEEP
12288:33Sy2Y1/DbZAH/aPKgkv/I+DKGuwAklCa4cuIn6xAeecWnptNGIWioND:3x1/HZAfTgkv/I+QQIcuIJeef/jWioND
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RFQ DAMMN #578387 Pro-pdf.exe
Files
-
8da91da3693d984fe4f826a596f137fb6e6d8ec1e0b0ccb09cdee983b57f410a.z.rar
-
RFQ DAMMN #578387 Pro-pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 652KB - Virtual size: 650KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ