Static task
static1
Behavioral task
behavioral1
Sample
Shipping Docs PO12399/Shipping Docs PO12399.xlsx.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Shipping Docs PO12399/Shipping Docs PO12399.xlsx.exe
Resource
win10v2004-20221111-en
General
-
Target
963382A0017CF0A755FEEE18DBA48A9EB5F33A34CCE840BCF0DE13FFC5003057
-
Size
338KB
-
MD5
c8a55456dd5024439763ebc9fa618cf0
-
SHA1
145242e1b1d50212a4b3fa7d60c45ff28eb40a66
-
SHA256
963382a0017cf0a755feee18dba48a9eb5f33a34cce840bcf0de13ffc5003057
-
SHA512
3ccff323659bc7cf75285b42c047f0ea47eb9165c305278c4213da328fc4e7f22e40e40ec0294fe80f54ea3e94c1b643bc112d52ebdc0439737da5ff91fb9aaa
-
SSDEEP
6144:TP22YbD7S+3DKxy4ffU5/SE6xipagZhsUXnBA93GPT1bDyIaOc5IS7du:T0D7S+X4fs5tmiPNBoWPTlejO2X7w
Malware Config
Signatures
Files
-
963382A0017CF0A755FEEE18DBA48A9EB5F33A34CCE840BCF0DE13FFC5003057.zip
-
Shipping Docs PO12399/Shipping Docs PO12399.xlsx.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 428KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ