Static task
static1
Behavioral task
behavioral1
Sample
ZAMÓWIENIE_NR2407115366872891PDF.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ZAMÓWIENIE_NR2407115366872891PDF.exe
Resource
win10v2004-20240709-en
General
-
Target
11072024_1600_11072024_ZAMÓWIENIE_NR2407115366872891PDF.IMG
-
Size
1.5MB
-
MD5
da39e5ff9d99a59c4b55674ac6a3763d
-
SHA1
483d230d7b2cc693d6dbf490bb250ffd4f186ba0
-
SHA256
160ffb7f948636fb996c304e66ba6fa0b14ba439c2bf8d87c601bc67d5f5db4d
-
SHA512
eb14e3b0c2acb142f8f0b1f871852a3461fc61b7c6cbbf879528d5a5f0ed1d3899d4d8873ef3528ed75a5f9bffaaa3e2ba897adda37bd6393e194e2443fbf781
-
SSDEEP
12288:/LLwulIXCJnxVhSJUnGH9M7AMlsUnZqgAniosDPTjphJXxWr5JNHrU32FWrM9uOU:/oydpAJSGHy7AMfwoo+prXxA4NA9gxN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/ZAMÓWIENIE_NR2407115366872891PDF.exe
Files
-
11072024_1600_11072024_ZAMÓWIENIE_NR2407115366872891PDF.IMG.iso
Password: infected
-
out.iso.iso
Password: infected
-
ZAMÓWIENIE_NR2407115366872891PDF.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 922KB - Virtual size: 921KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ