JWud.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PR-ZWL 07364G49574(Revised PO).exe
Resource
win7-20240215-en
General
-
Target
8723429d2a9b031a7d059d2df064ceb47b9a2b589bbc57d68b57b704190c68bd.rar
-
Size
678KB
-
MD5
398157400217b5f93239437a18d4a81c
-
SHA1
fc26c139809da1b2bd956237eae9426a5c92aeea
-
SHA256
8723429d2a9b031a7d059d2df064ceb47b9a2b589bbc57d68b57b704190c68bd
-
SHA512
ce9b57d314965ec5a7625b656642e94f4e4969edf5062ef78d4c3c21ee1cc1058b08ffddc5691c4ea5ee64047d86a6502aca41e47a0d6bc779d59a663dada4a3
-
SSDEEP
12288:1mAGizhtJ1ZKJGbz1oQ9gnElxblApn+JzOHqAJ3nMrDGGRpQ9WNpKxQhKGTO1:ATqtJ/d1odEfbU+JYDJ3noDG0pQUXKxH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PR-ZWL 07364G49574(Revised PO).exe
Files
-
8723429d2a9b031a7d059d2df064ceb47b9a2b589bbc57d68b57b704190c68bd.rar.rar
-
PR-ZWL 07364G49574(Revised PO).exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 757KB - Virtual size: 756KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ