C:\Users\Administrator\Desktop\Client\Temp\tHSlfFCvkd\src\obj\Debug\HashtableDebugView.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PO_006614.doc.exe
Resource
win7-20240903-en
General
-
Target
5e74a8deacb5b18b78d3c7f9425210d696ad1b4f43e34b6f61d1f9e89ff0a9f7
-
Size
1.0MB
-
MD5
22ab9566498374f56f9c7d6ae12c8d7c
-
SHA1
afb6b4cd95aea9fe038885f8fa0c2131dc8a033c
-
SHA256
5e74a8deacb5b18b78d3c7f9425210d696ad1b4f43e34b6f61d1f9e89ff0a9f7
-
SHA512
d8bb66d72016b04d7980f951f4955ee61dac15273d8050869231b679cd27a7eb68ddecad222188c2dd166c3e2defcd6ab503d60d8aa2069da4b54d2625626246
-
SSDEEP
12288:S23QgPjcoqQMW//hV/9SNLSd1qu/+P9t6+1b7SzIKUcjKK6xhCCsr0IVFofA4qei:/3VLxpBtyo+V57Si4rnVF876gGCdo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PO_006614.doc.bin
Files
-
5e74a8deacb5b18b78d3c7f9425210d696ad1b4f43e34b6f61d1f9e89ff0a9f7.zip
Password: infected
-
PO_006614.doc.bin.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1002KB - Virtual size: 1002KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 374KB - Virtual size: 373KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ