Static task
static1
Behavioral task
behavioral1
Sample
narudzba 0257 24-07-2024 MAHLE d.o.o_pdf.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
narudzba 0257 24-07-2024 MAHLE d.o.o_pdf.exe
Resource
win10v2004-20240802-en
General
-
Target
cd1fe6e22c9eac996ba66f1ef1a03d356bc745e262ae76c506fe82e5a4ec4021.iso
-
Size
80KB
-
MD5
5b03f54abad827c4a0c7a3c9dce1f299
-
SHA1
252e9318e61dea37697fe64ff3c07aadb177870b
-
SHA256
cd1fe6e22c9eac996ba66f1ef1a03d356bc745e262ae76c506fe82e5a4ec4021
-
SHA512
c7f8eb5b5664471bb5d315dafadb62afa787ae3652f28c38ae32fb0bc5e37f71c60134d418ab0f1f67e68847b133df858f4b7d05325114039cf6f0f1ec081a1a
-
SSDEEP
384:WVYIOaeCuEEk4xkR2a2xF30Eku5WzWb7EGemq9hK5JyH3BDUaC:WSnafQk4xkR2zxxn5ImQT9hK5slC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/narudzba 0257 24-07-2024 MAHLE d.o.o_pdf.exe
Files
-
cd1fe6e22c9eac996ba66f1ef1a03d356bc745e262ae76c506fe82e5a4ec4021.iso.iso
-
out.iso.iso
-
narudzba 0257 24-07-2024 MAHLE d.o.o_pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ