Static task
static1
Behavioral task
behavioral1
Sample
77954-668716095406000-20240826160944.pdf.exe
Resource
win7-20241023-en
General
-
Target
31102024_0237_30102024_77954-668716095406000-20240826160944.pdf.gz
-
Size
840KB
-
MD5
8f1747742d3a1ed4b8ac22cfe9143980
-
SHA1
8b82561ba439143af8e1e8606788d60c8efe2ed2
-
SHA256
11628243191e0ea5350275ee991781c35ce22f93635c2a613bd0ae5f49e442f1
-
SHA512
2e504ecc3970404b486df41958cabde9695ea51eb3d87b118f3fa5b07b2978d38597edc58b935da77a1a3bbb76cde01ac1f230a958b416e914b2644229d06a96
-
SSDEEP
24576:O4z/H6uxAnCATgaAmJh6+YpAQePd5tS3afQFt:O4z/aaAntTgyYaFn03XFt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/77954-668716095406000-20240826160944.pdf.exe
Files
-
31102024_0237_30102024_77954-668716095406000-20240826160944.pdf.gz.gz
Password: infected
-
77954-668716095406000-20240826160944.pdf.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ