oqyA.pdb
Static task
static1
General
-
Target
PdF-Payroll_Employee_1Contract_Amendment_June_2024.txz.exe
-
Size
657KB
-
MD5
5ab225f53b7717173dd4eb0809f75c35
-
SHA1
65532a12609b7b4aab609fedbef3a7d91452f2f1
-
SHA256
34f35e25f5e85ea07cc9cb7bf05e2131ecbbec0d545b47e3cad55f040c1adcfe
-
SHA512
6c19c0e7b856df0312d6c15b07006b31e85429a51a716ae12b42e5ece3d785d09322924dcbf5d249978055705074ca8c231baf4d438d3fdd225e9f2523a761ad
-
SSDEEP
12288:fzBk+OUyCECBPCB95M1dURaRnFLVSuKWDLo+wLia3Qqq0tygJWV9lr3s2Wp:f931nZhCT5MQREFFDlwP3Jq0ggG3sn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PdF-Employee Payroll Contract Amendment June 2024.exe
Files
-
PdF-Payroll_Employee_1Contract_Amendment_June_2024.txz.exe.rar
Password: meyertool
-
PdF-Employee Payroll Contract Amendment June 2024.exe.exe windows:4 windows x86 arch:x86
Password: meyertool
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 676KB - Virtual size: 676KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ