Static task
static1
Behavioral task
behavioral1
Sample
Port Stewart - CTM at Belawan - ETA 24th sept 2022.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Port Stewart - CTM at Belawan - ETA 24th sept 2022.exe
Resource
win10v2004-20220901-en
General
-
Target
Port Stewart - CTM at Belawan - ETA 24th sept 2022.exe
-
Size
981KB
-
MD5
b890806125108883b8f530303c852b06
-
SHA1
7e089616b02ce9486a7025a05b1239efd2064db1
-
SHA256
48062bef2aa6ec2dc07726801f8ddfb439cef5c37d02f6c431fb4f54cde3caf6
-
SHA512
720f52bf7378e9fe73326b98419120e036f1d0146abac43df7ee3f0737ffebae053b33055937e9ad34f88251e3248e9bd437008daf63a57dc14bb00543124b62
-
SSDEEP
24576:lZ5gYdYCEScP3Qx5GKlq9F+IXY+mzo3bv:H5gYdvzCCwKqjhlmzM
Malware Config
Signatures
Files
-
Port Stewart - CTM at Belawan - ETA 24th sept 2022.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 979KB - Virtual size: 979KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ