Static task
static1
Behavioral task
behavioral1
Sample
PRE SHIPPING NOTICE.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
PRE SHIPPING NOTICE.exe
Resource
win10v2004-20221111-en
General
-
Target
PRE SHIPPING NOTICE.zip
-
Size
423KB
-
MD5
495c93caeb705ccee10c79ea6e100398
-
SHA1
7f84ae84132ce436abf434ed5f7c4c9b663ce5b0
-
SHA256
fcd73b835294b1c2f2ab33f93b4e8de15896dcaa7d74dfbe081c136138eeb358
-
SHA512
2014b55d0cbad4fd840da6b54bd375fbf1315a8d251d0e2f998007f03d667b5548b6a6acf215ff2dafa65bec4e170101c4d0d96971cbd5d152602395ce884489
-
SSDEEP
12288:DtTbDKSnr3AAt7DWKIu5CNRntEAAMJ9BWZee:DxHKSnb5tfWKImLU9Bw
Malware Config
Signatures
Files
-
PRE SHIPPING NOTICE.zip.zip
-
PRE SHIPPING NOTICE.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 490KB - Virtual size: 489KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ