Static task
static1
Behavioral task
behavioral1
Sample
Shipping Doc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Shipping Doc.exe
Resource
win10v2004-20220812-en
General
-
Target
Shipping Doc.7z
-
Size
570KB
-
MD5
a8d3bf373b246491c0f682e57b0935ce
-
SHA1
b6c1517b8c55caba78557b00053e8c6fef0f6c44
-
SHA256
97e63ae45df7e83bee13485bd89ed867b2d6f92ab7ffe0d602142d11397e06e5
-
SHA512
0aaf1cc5b3afe2e88889fff1d4ea6197b17f63f3cb6ebec4d24e28d995e054dc0cd5b64799fe37ae03b703bd5a7a452620751fde4e9d74cf2fd91e19e4ae5e87
-
SSDEEP
12288:r81Iz/3ZwulGKcuK2B/cx9OT6orYlojC65tdcy/S1yEWY:dzG6cx9O+A5zx61yEWY
Malware Config
Signatures
Files
-
Shipping Doc.7z.7z
-
Shipping Doc.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 811KB - Virtual size: 810KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ