Static task
static1
Behavioral task
behavioral1
Sample
NOV ORDER.exe
Resource
win7-20220812-en
General
-
Target
d9de539af0fe2971361b5690de599dda
-
Size
6.8MB
-
MD5
d9de539af0fe2971361b5690de599dda
-
SHA1
5e6db3da4ab0198848165e9a6395c88833d1209b
-
SHA256
d57ce5558e4af641b5a7d64083796465d3c6b581323368fb9909c36d2b46d527
-
SHA512
f7274f52cf28aa295c6f1a02ce094861d9daaeadfbb34b5a7961fce15d69d80d845bf7bca17295d8fe0a23bdc87b813dcf1667a52cd3c2f732cf9ecd89c5da60
-
SSDEEP
49152:KCqT8Z1BNBU87oU6NMhdvowNudQQMYXBOfZyVR:U
Malware Config
Signatures
Files
-
d9de539af0fe2971361b5690de599dda.eml
-
https://shchuangshi.en.alibaba.com/company_profile.html?spm=a2700.shop_index.88.75
-
http://www.csigroup.com.cn/
-
http://shchuangshi.en.alibaba.com/
-
-
NOV ORDER.IMG.iso
-
NOV ORDER.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 853KB - Virtual size: 853KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SAMPLES AND SPECIFICATIONS.IMG.iso
-
email-html-2.txt.html
-
email-plain-1.txt