Static task
static1
Behavioral task
behavioral1
Sample
bill of lading.exe
Resource
win7-20220812-en
General
-
Target
bill of lading.exe
-
Size
862KB
-
MD5
f4c6c8b6fc91dc8ff9230a6bb699d825
-
SHA1
6b3494490e2a350093c6864fbcfe56660b12db2c
-
SHA256
fc3b3317c4877d207407aad03ab5af9c0fbd4ea5e71353139eef0af9ab013c91
-
SHA512
79c0f036070a0d0e708fa49a536a5615fa6d68b370ed274532f7d648e5e779223aefbdacd5a19a4335731dfbed3c0574cd2a74ddbedadafe9031310532efe682
-
SSDEEP
12288:mwqfEur3vTwrMihFVtqtTFUprtROZoyKMZdwC+HuBkuNYBc5Z:cTgltqtTCpr6hZdwi5
Malware Config
Signatures
Files
-
bill of lading.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 855KB - Virtual size: 854KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ