Static task
static1
Behavioral task
behavioral1
Sample
Shipping documents.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Shipping documents.exe
Resource
win10v2004-20220414-en
General
-
Target
6638f6849a9c27dc035d5ba97690c670152b9f300c579ad44d73a8274f8ceb75
-
Size
412KB
-
MD5
d7290e004145d515f61559ad1991298f
-
SHA1
2242a047e772b4b247ec1b1679ed5f875269cace
-
SHA256
6638f6849a9c27dc035d5ba97690c670152b9f300c579ad44d73a8274f8ceb75
-
SHA512
13373c7aff4c77aabd127422c4f1c2bcf77a8645ade431888b7828333df7b79d5c6b6f3ad269a8ada4d4d63202cba2ea444a1dd32308ac55e9d020573acfc0a2
-
SSDEEP
6144:4qPw0EpCu03B4QaQye6EWpGL0eRql8AQTI/uulCbXaNaEsR1JgKv1wsRYQ9YkM28:7Lx2e6/pGFFZfuNQJR3Resb7w
Malware Config
Signatures
Files
-
6638f6849a9c27dc035d5ba97690c670152b9f300c579ad44d73a8274f8ceb75.rar
-
Shipping documents.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 452KB - Virtual size: 452KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ