SHIPMENTDOCUMENTSPDF[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SHIPMENTDOCUMENTSPDF.exe
Size 2.4MB
Sample220328-whfb6achb8
SHA256 bb95fa20a55260f729584b7932c7dba208dcc5b0a7597be447a72e481e0dcb09
MD5 db995bcbc1b1ffe95cbde7f316b577bc
SHA1 95049e53f64a1b5050d697d88ccc8bf62d58e3f6
SHA512 c09beeab2ab7c7b65d92547f1559409012a2b1f787b4d399d8c745bf16ed2178261c64ae089582123b0111a385ba6c7d698091fe4ce72ab8af1f17a40214f120
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

SHIPMENTDOCUMENTSPDF.exe

.exe 2.4MB

SHIPMENTDOCUMENTSPDF.exe

IMPHASH 05bdc6a6adf04eca38d0953caca5e0fa
SHA256 bb95fa20a55260f729584b7932c7dba208dcc5b0a7597be447a72e481e0dcb09
MD5 db995bcbc1b1ffe95cbde7f316b577bc
SHA1 95049e53f64a1b5050d697d88ccc8bf62d58e3f6
SHA512 c09beeab2ab7c7b65d92547f1559409012a2b1f787b4d399d8c745bf16ed2178261c64ae089582123b0111a385ba6c7d698091fe4ce72ab8af1f17a40214f120
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

4271

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree HeapSize GetProcessHeap InitializeCriticalSectionEx DeleteCriticalSection Sleep VirtualAlloc VirtualProtect FindResourceExW LoadResource LockResource SizeofResource FindResourceW MultiByteToWideChar WideCharToMultiByte FreeConsole AcquireSRWLockExclusive AssignProcessToJobObject CloseHandle CompareStringW ConnectNamedPipe CreateDirectoryW CreateEventW HeapReAlloc GetProcessId GetProcessTimes GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDefaultLCID GetSystemDirectoryW IsValidLocale IsWow64Process K32GetPerformanceInfo K32GetProcessMemoryInfo K32QueryWorkingSetEx ReadConsoleW ReadFile SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers SetStdHandle HeapQueryInformation SetEnvironmentVariableW FreeEnvironmentStringsW HeapAlloc HeapDestroy SetLastError GetLastError RaiseException GetProcessHeaps DecodePointer GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose SetConsoleCtrlHandler WriteConsoleW GetFileType EnumSystemLocalesW GetUserDefaultLCID GetLocaleInfoW CreateFileW LCMapStringW GetTimeFormatW GetDateFormatW GetCurrentThread WriteFile HeapValidate ExitProcess GetModuleHandleExW GetModuleFileNameW IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount SetEvent ResetEvent WaitForSingleObjectEx GetModuleHandleW GetProcAddress QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind InterlockedPushEntrySList InterlockedFlushSList EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetSystemInfo VirtualQuery

user32

GetActiveWindow SetProcessWindowStation TranslateMessage UnregisterClassW SendMessageTimeoutW MessageBoxW SetProcessDPIAware UnregisterClassA

advapi32

GetKernelObjectSecurity GetAce FreeSid EventWrite EventUnregister GetLengthSid

ole32

CoTaskMemRealloc CoTaskMemFree CoInitialize CoUninitialize CoCreateInstance

oleaut32

SysAllocString VariantCopy SysAllocStringLen SysFreeString SafeArrayDestroy VariantInit VariantClear VariantChangeType

shlwapi

PathMatchSpecW

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

winmm

timeGetTime

Name

.text

Size

840KB

Virtual Size

839KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

186KB

Virtual Size

185KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

777B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

270B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ