Static task
static1
Behavioral task
behavioral1
Sample
ATI-Export quotation N° 34715383 pdf.exe
Resource
win7-20240903-en
General
-
Target
2202d6f7644a964e766a1977279da2ad9825b12032c9a1b53ed0349dc8bec82e
-
Size
652KB
-
MD5
02c3039dc410fe1dcf5be59a7d4e063c
-
SHA1
7d1586737b95bb8258edfcd9c9786acd6b79eb14
-
SHA256
2202d6f7644a964e766a1977279da2ad9825b12032c9a1b53ed0349dc8bec82e
-
SHA512
916c31fce4769413d3624666d6eb768c075d5da79170f76e8f3180a3c68408c5a43672aabc9c9b37c9eed68567d84b14620cd0a18c093bca7d7394d6f11741d7
-
SSDEEP
12288:rBaIhzIOi9QGJnGFQJhfJCRYycOVNfTGvEd/WDyjncMyKghQvI6q4eM61:wINIOuQkGWJhRCRNcYNa2WUyHhAIqty
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/ATI-Export quotation N° 34715383 pdf.exe
Files
-
2202d6f7644a964e766a1977279da2ad9825b12032c9a1b53ed0349dc8bec82e.zip
Password: infected
-
6b58ca124a1676d22ff08c97e4c595a832e97ea19669942acaf381af2343f76f.rar
-
ATI-Export quotation N° 34715383 pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ