Static task
static1
Behavioral task
behavioral1
Sample
1495104.PDF.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1495104.PDF.exe
Resource
win10v2004-20240508-en
General
-
Target
22fb60f765aebaed14e476d535f5a6d209f5906040f44771bce3ad148fa480e6
-
Size
706KB
-
MD5
836ec58dd829090b8c1a005260b2ceeb
-
SHA1
7397b45275ffab1f71c99d322dc681006419c273
-
SHA256
22fb60f765aebaed14e476d535f5a6d209f5906040f44771bce3ad148fa480e6
-
SHA512
dfef10a34f12560402afba038f049ba3cf1925316045cf938ca75fb9267aefa84c3f83ae5382c512ea41a949a0412abe6abae4a42bf69f32557f7ef524595464
-
SSDEEP
12288:R4E8FipF1kcV+5rCpGs0GuWeQn0eJQx86xOaiwXzfbmGJZ7owCpl92ZtRbx:9kJl5mpG6eQn0ITqOdS1dCeRd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/1495104.PDF.exe
Files
-
22fb60f765aebaed14e476d535f5a6d209f5906040f44771bce3ad148fa480e6.zip
-
1495104.PDF.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 961KB - Virtual size: 961KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ