Static task
static1
Behavioral task
behavioral1
Sample
shipping docs.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
shipping docs.exe
Resource
win10v2004-20220812-en
General
-
Target
shipping docs.exe
-
Size
1.1MB
-
MD5
ea957fec2bfc2448b11f998cbb72beec
-
SHA1
16b48d262908d6493348c716664c7ed3d2e6579f
-
SHA256
df4eed6b429eba0c7fe96cce25b317efe39b46a443574f1d0aa9445da22f0ac2
-
SHA512
785c87a0a94d991e504357092f5433512b3aeb2f4faf68950c02b0d8e5328ea747b66b0976c2b78f9ea214691f91e7ac7da33460a7274c82a2c73cdac452f33d
-
SSDEEP
24576:1ziwgh/awZ2DzNZHOM35/A5h95pRcH++:1ziTh/d4f35/A/dE
Malware Config
Signatures
Files
-
shipping docs.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ