Static task
static1
Behavioral task
behavioral1
Sample
Fabric WW-1580 (DPEBO1-2SDC September Buy.pdf.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Fabric WW-1580 (DPEBO1-2SDC September Buy.pdf.exe
Resource
win10v2004-20240802-en
General
-
Target
978784d3e8f5a38e0d6e4834cf869a6c.bin
-
Size
781KB
-
MD5
290aeb951365386f61915fa0eb50ec23
-
SHA1
89ea91fae3f99b9682e77606c00865b2aadcd96a
-
SHA256
19745cb0c8aa0c96bbfe2d50bdaded56e2127c319be7b3dac3e1374f54127689
-
SHA512
ddee4efc7c1df1d5146c4d9f81da52bbdd5cb261c72a42bae921b783ab7b34430fcca90eb50982064f32acc24929c80391f3904aa0f48fecfa5178f540ef28df
-
SSDEEP
24576:kr2JHvOY5z6niqLmquu1obQALSHUB3ZCr:kr2JPOm6HLZokQSHUBJY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Fabric WW-1580 (DPEBO1-2SDC September Buy.pdf.exe
Files
-
978784d3e8f5a38e0d6e4834cf869a6c.bin.zip
Password: infected
-
ed0aa1d5f77fbcd828db372a4a5683beca0fcb468aef709f5611ebc744023c53.tar.tar
Password: infected
-
Fabric WW-1580 (DPEBO1-2SDC September Buy.pdf.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 655KB - Virtual size: 654KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ