Static task
static1
Behavioral task
behavioral1
Sample
MSC SHIPPING SHPSI42-08643_DOC.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
MSC SHIPPING SHPSI42-08643_DOC.exe
Resource
win10v2004-20221111-en
General
-
Target
MSC SHIPPING SHPSI42-08643_DOC.exe
-
Size
805KB
-
MD5
245b0b750ebe23ce007c2983f19627b3
-
SHA1
1c047dee920da4eaf53f64432a30ef0182db33aa
-
SHA256
5955fea6a228d168f597045a397f6d9612e054aaaea282e393891e6a068c9250
-
SHA512
fc7cf4faf5fdb1b3046763321888fbe26cb75d505e132aac558ef2fd51a1d8ae5cfe720937f5e3b5b453446e443616143f9f2730e6c4532df1a376d150aa2739
-
SSDEEP
12288:WNr1FmR5wz8NxSV2iNMl7S9G9whW/iutqapET7EpS4XCk:WNr6G1qFynhW/Z47Eg6
Malware Config
Signatures
Files
-
MSC SHIPPING SHPSI42-08643_DOC.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 802KB - Virtual size: 802KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ