Static task
static1
Behavioral task
behavioral1
Sample
SHIPPING BILL.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SHIPPING BILL.exe
Resource
win10v2004-20221111-en
General
-
Target
SHIPPING BILL.zip
-
Size
8KB
-
MD5
1c2b76fd9d7a1ef24c8841292e00749a
-
SHA1
22ae98824aaca51ff4a22073fab61e16819221f2
-
SHA256
ba87f80b98d8990a0925b1cf6848b67de3e586830fed2a68ca79a2162eb1cadf
-
SHA512
872153444f5d096a52379d2bc2030f3e9ac432f34741dbaff7bc0a1fdf331ce3005e30dc8673047ceeb6b5aecf119b97006f15cb4773a60364f6babdfcb1b968
-
SSDEEP
192:lD5VY1Rm7oGS031pTAs9OYAEuissJOhk24A0QxKi+t1LjfA5Z:PIcSsZAs9OYAEuYOp0QxKi+7LMD
Malware Config
Signatures
Files
-
SHIPPING BILL.zip.zip
-
SHIPPING BILL.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ