Static task
static1
Behavioral task
behavioral1
Sample
FedEx Express Shipping DOC.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
FedEx Express Shipping DOC.exe
Resource
win10v2004-20220812-en
General
-
Target
FedEx Express Shipping DOC.rar
-
Size
502KB
-
MD5
d044d63bbfcfb62c7752c6da26253810
-
SHA1
18d2a3a2718fd94d98dedb4965c985d22f59b549
-
SHA256
4f857ed442d173433e8eac099da803d9a90dcb668ed686ef6628d16a27429f12
-
SHA512
2b7ab19c5763527f2545b0d0ee0db7fe67f5f2b9146c613791757997f7e7ae1f09ff8aecbed3fe261db0849aa403859e5b5781b95604015018c40750f2867f76
-
SSDEEP
12288:lENLvdPWSkOnPetTw2SOwf6h9JJjqas0jU:lENLlPMbtTNz7JJeR0Y
Malware Config
Signatures
Files
-
FedEx Express Shipping DOC.rar.rar
-
FedEx Express Shipping DOC.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 800KB - Virtual size: 797KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ