Static task
static1
Behavioral task
behavioral1
Sample
PO#55666355252367578-pdf.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
PO#55666355252367578-pdf.exe
Resource
win10v2004-20240611-en
General
-
Target
0b41cacd4b074eeb13a5d1044b4900840d0e5e4a54dd65e7566e28727fdcfa92.rar
-
Size
701KB
-
MD5
0a6d41b16f9e785cd76d99a78db16c65
-
SHA1
585c354e3c246b517343218cad34e05be6152841
-
SHA256
0b41cacd4b074eeb13a5d1044b4900840d0e5e4a54dd65e7566e28727fdcfa92
-
SHA512
3d8602762764af3ae3f6ef76b26f3668a58c31b5b44b4142141d020c63c6d6dc41d65c31320b4dff024f156e51d0711c7eb0ad9358e09cde76dd7c4085aa2b78
-
SSDEEP
12288:F2jfuU2EvIQcjP1Vlh5HTSx8xiCdqsNfkdDd+joiP53ZK11807RhmsLIcLbOhYmb:FB9+yr1XhVTj6Wg5WJyJh/XbO+m99
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO#55666355252367578-pdf.exe
Files
-
0b41cacd4b074eeb13a5d1044b4900840d0e5e4a54dd65e7566e28727fdcfa92.rar.rar
-
PO#55666355252367578-pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 852KB - Virtual size: 851KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ