C:\Users\Admin2024\Desktop\Outputs\Apak.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PO1511-pdf.exe
Resource
win7-20240708-en
General
-
Target
71b8b1793ced80821449811c0720b8d4e352a94eb653b65b332b33f2318408e9.zip
-
Size
37KB
-
MD5
36ab5d730664d4b27d5be02ba3156dbd
-
SHA1
59207c0824aa4d582c7ca0d55c0f60f066bedf37
-
SHA256
8b824076cdcd18ea37ccb2f09146c269d408e21e1683cc4467ed2cb2f12f656f
-
SHA512
61e1a6bbb32b7c9a04fd955d0aa0558bdbb5df411a30dfced625bea7cc04a186116f5e3a67819fa8d2e2b08aabfef808bbbb01bf9774a84d1a6d9f2c9bf771a6
-
SSDEEP
768:gEoYTtfg82mhng880Ek3wRe5k3DmdsKQZxoU45XHG3RO/OK3bR2wKurwU:gE1ytmdZEk3wRe5kSdLKxz45Xm3ROv5f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack002/PO1511-pdf.exe
Files
-
71b8b1793ced80821449811c0720b8d4e352a94eb653b65b332b33f2318408e9.zip.zip
Password: infected
-
71b8b1793ced80821449811c0720b8d4e352a94eb653b65b332b33f2318408e9.cab
Password: infected
-
PO1511-pdf.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ