Static task
static1
Behavioral task
behavioral1
Sample
Zamówienie_nr.811998290012PDF.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Zamówienie_nr.811998290012PDF.exe
Resource
win10v2004-20240508-en
General
-
Target
05062024_1613_05062024_Zamówienie_nr.811998290012PDF.img
-
Size
1.4MB
-
MD5
56d14b6928add548c8ca30185e127cbd
-
SHA1
36ee65d7ab7939a7bb02707c9cbe9f213be33348
-
SHA256
2656f8bd424c465fe4f24b1f2e35ca677bb2979af4e9b775f413582480b77d13
-
SHA512
1e0bec76ead11a95d862596d15191874cc7951f3df73cfe814320d1a7150842d66ebaf6213c26eb964e3df2966abd89b81ffe62959ccdc4bdc1b47ecd568b7d3
-
SSDEEP
12288:nwUmCHqytsCF+v85dRuFyaFAiWWojbh9Mpw5JNHrU32tWrM9uOAHnI:RTqGX+U5MyOAiGPJ4JA9gI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Zamówienie_nr.811998290012PDF.exe
Files
-
05062024_1613_05062024_Zamówienie_nr.811998290012PDF.img.iso
Password: infected
-
out.iso.iso
Password: infected
-
Zamówienie_nr.811998290012PDF.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 850KB - Virtual size: 850KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ