Static task
static1
Behavioral task
behavioral1
Sample
SHIPPING.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SHIPPING.exe
Resource
win10v2004-20221111-en
General
-
Target
Shipping Documets.img
-
Size
1.2MB
-
MD5
bb25c351d56faedd93c64d38f8091b77
-
SHA1
628886ca29d1a2dc1d1824caef60038cf7b63254
-
SHA256
2a7907fe6941e58575f5bdef810f50de80de1218c5366cbd5fb6a1b9ff423a42
-
SHA512
0713e257d3b2828661bff9227650de25cdf4325efb6d1210e2cc3f2351cf9b2a95f3c8a164e1074bc23e09c9126e9906a7f8cd4470712b0ef7e03b44c5b16aff
-
SSDEEP
12288:NZVooqtR8h5Om6BfRimMU3JWD42P4+Weh3ih9HeA:NLooE8hkm+fRrMU35P+BYTf
Malware Config
Signatures
Files
-
Shipping Documets.img.iso
-
SHIPPING.EXE.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 714KB - Virtual size: 713KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ