YZve.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Financial Invoice Report - STI ME-3051-2024.exe
Resource
win7-20240220-en
General
-
Target
647beb0efbad35eda3a220736446027e540a373c7ff3be6063a79b801ab5ec98.arj
-
Size
646KB
-
MD5
21ddd702dcac18dacc12779b16795fb6
-
SHA1
4d7dcecfa0610178b697b82a85760f149a160185
-
SHA256
647beb0efbad35eda3a220736446027e540a373c7ff3be6063a79b801ab5ec98
-
SHA512
3920d802b6cb53a6591c41ad3af4733d3f8bee683581b4390d8e071467fdec79865984a95a1d64cce78b6e343a16bb93e282cc1cef231e018b026628970c9331
-
SSDEEP
12288:kfHqDfbcKCoJ/8cBa7wuRie311mWha4hdjU+tmA06hpwLZqOIAlyAn8dmsF:kfU98cRu5F1mWY4k+s76h6wOIdA8dZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Financial Invoice Report - STI ME-3051-2024.exe
Files
-
647beb0efbad35eda3a220736446027e540a373c7ff3be6063a79b801ab5ec98.arj.rar
-
Financial Invoice Report - STI ME-3051-2024.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 684KB - Virtual size: 684KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ