Static task
static1
Behavioral task
behavioral1
Sample
Cobro_473152503353937937121882933139460361945218628084381001751848317.pdf.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Cobro_473152503353937937121882933139460361945218628084381001751848317.pdf.exe
Resource
win10v2004-20240802-en
General
-
Target
19092024_0058_16092024_Cobro_473152503353937937121882933139460361945218628084381001751848317.pdf.rar
-
Size
1.2MB
-
MD5
b6b51fed21af7ac99fc5a4a9a989b4d1
-
SHA1
9baf9d272114735a15cd73189c8aa31d2ef1ea32
-
SHA256
92adf52b3b33c6520246cb0376c88fc0bc99da5e09a7888df8ca6ef47bee7420
-
SHA512
b10c0ea5dc221667e0eb864355e62c746f43151c78a2e654749e42d3014f6ebdf07e94ece6c496d15357166fec299f2d16a0ae08fe3cc244b8151dc0ae830f67
-
SSDEEP
24576:1zn5P2CMY6p1IFFQRzOAt1j6IpzjJ8vVSty44tXbrKud0MCK+c1YB3w4csE7:l5PzXs1CFQRaAt1zzjJ89KgFFMc1Ac37
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Cobro_473152503353937937121882933139460361945218628084381001751848317.pdf.exe
Files
-
19092024_0058_16092024_Cobro_473152503353937937121882933139460361945218628084381001751848317.pdf.rar.rar
Password: 160924
-
Cobro_473152503353937937121882933139460361945218628084381001751848317.pdf.exe.exe windows:4 windows x86 arch:x86
Password: 160924
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ