Static task
static1
Behavioral task
behavioral1
Sample
Order #SS1953pdf.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Order #SS1953pdf.exe
Resource
win10v2004-20240802-en
General
-
Target
Order #SS1953pdf.exe
-
Size
579KB
-
MD5
ee32c969a50da7d3a2021509f1d270f5
-
SHA1
5b50c87678e7c8b70f271c3cd135683ffd4a0498
-
SHA256
8feff55469c7d5bc9dbfaab62fe9b78843c3fabad5be532da632352fd18b549d
-
SHA512
d23311573363e0f8b9b1ba41b2c5b40b32627a75b2bedbd47f10ddf6efbf909be7ccb56086e1d585ee177f6177350fdcd4565d0adb6e8696ade9311303450817
-
SSDEEP
12288:+CuFjGTip659kZlslwXP4sp+ezCn2b4C:sFZwcTsOfppTzCC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Order #SS1953pdf.exe
Files
-
Order #SS1953pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 439KB - Virtual size: 438KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ