Static task
static1
Behavioral task
behavioral1
Sample
shipping docs.exe
Resource
win7-20220414-en
General
-
Target
shipping docs.exe
-
Size
722KB
-
MD5
ec529b525e7897c81b9fd1e2291cf885
-
SHA1
867d80609c6fe0cafe8326c5572c243e24da1f42
-
SHA256
1752302de3862bd15be2d539255fed5e71a4180cd987b206542ef8d5f5c6af13
-
SHA512
6080162b81e69209f6866c7e3e5abfb52a719c0ef55f523e637af26646daf91c01f6e150790e8a12f87db5a76a39aed7fa92510c2149c7f4ca6e88e0bd11003c
-
SSDEEP
12288:lX/QqWjsZ5uEzUxQGZrcoB25dp2Skk58fVt26O4E+yPI/RJDKPaUTYNCXKTQaR7g:m/W5pUxQBdpU68t2zP
Malware Config
Signatures
Files
-
shipping docs.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 719KB - Virtual size: 719KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ