Static task
static1
Behavioral task
behavioral1
Sample
TRIANGLE SHIPMENT BL.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
TRIANGLE SHIPMENT BL.exe
Resource
win10v2004-20220812-en
General
-
Target
8199546424.zip
-
Size
502KB
-
MD5
9bdf5856f272f8e59e5600fc917abce1
-
SHA1
8aa5562fd2311387dbd5e5cbd382d840e492d6d6
-
SHA256
5d638b126855885630f74b18047c8ee6226320df249822567e4ceb8498368b9c
-
SHA512
63058d708c6e21646ae5eff2eca0607dda8e6ddb59be8d6b3b1302977ad27a5c56e85061a11b316b0f9d873c1658403ed4bf43647906eaa3261889cc457159cd
-
SSDEEP
12288:IBdnJnsA+mHMnH1PpJWtgu8u16Y1kR/PoilbOdaRHFo:IBRT+mHMnVPStfl1kFsdMo
Malware Config
Signatures
Files
-
8199546424.zip.zip
Password: infected
-
fe87639c3b902d3bf450221aa01f48eb9e501fd55006def104c1b6c146e7a761.rar
-
TRIANGLE SHIPMENT BL.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 939KB - Virtual size: 939KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ