Static task
static1
Behavioral task
behavioral1
Sample
CONG TY TNHH RAISING VIETNAM - USD 5850.00pdf.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
CONG TY TNHH RAISING VIETNAM - USD 5850.00pdf.exe
Resource
win10v2004-20240802-en
General
-
Target
811c3bc1522befd341813230bfdc0026f903eed76c4314d9a532c38acfaeab1f
-
Size
614KB
-
MD5
981cc5b26fea72e118589daff8c39d2f
-
SHA1
3799d6fc8cb7c736a0ff010c8bdc5f8665c146f2
-
SHA256
811c3bc1522befd341813230bfdc0026f903eed76c4314d9a532c38acfaeab1f
-
SHA512
8d66b39ff9e4684aa028eaa22bcfa266d830f334c4974feef05f76a4b2ef52807781d98c33d5edd4274f4f4c5e5e7462eb6b9ea6ec0e731e99768276f2914730
-
SSDEEP
12288:wQ5oCwjs38mpkPBb4fyIOVACJxftK013V6IEbieJmnnA:to5YpkPBbErOVbJF71wbZEnA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/CONG TY TNHH RAISING VIETNAM - USD 5850.00pdf.exe
Files
-
811c3bc1522befd341813230bfdc0026f903eed76c4314d9a532c38acfaeab1f.zip
Password: infected
-
b783c5832811d3db58d0292068625dd18afb76101d3ad9724c941946d93add9d.tar.tar
-
CONG TY TNHH RAISING VIETNAM - USD 5850.00pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 863KB - Virtual size: 863KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 372KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ