Static task
static1
Behavioral task
behavioral1
Sample
SPARE PARTS LIST.pdf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SPARE PARTS LIST.pdf.exe
Resource
win10v2004-20240508-en
General
-
Target
12062024_0837_12062024_SPARE PARTS LIST.pdf.arj
-
Size
589KB
-
MD5
8010a091bde4094e75dd57d006fdfadb
-
SHA1
53253e023ecf363500f0084ea9accd1566e001ec
-
SHA256
105205164b1e1deccf03880f1960540628650f0ae4d205404de84ecebd4e3fd0
-
SHA512
0de4589a53e009674601e97d86a414efaceba1502b4299f1c732e93126c32ac4299767ece818281d513d1395b36d583a7e81666ecffb64753b7f7adf6564cec4
-
SSDEEP
12288:Z1qZiHMMfpW3PyQXgKdzuHGbFqxI6daMEB/0iKZxxFW6GmtZVa:DpHMMkyQw0bAxILWiKZLoutZVa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SPARE PARTS LIST.pdf.exe
Files
-
12062024_0837_12062024_SPARE PARTS LIST.pdf.arj.rar
Password: infected
-
SPARE PARTS LIST.pdf.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ