Static task
static1
Behavioral task
behavioral1
Sample
Air waybill number 290132727 Physical weight 1 05 kg Seats 1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Air waybill number 290132727 Physical weight 1 05 kg Seats 1.exe
Resource
win10v2004-20221111-en
General
-
Target
Air waybill number 290132727 Physical weight 1 05 kg Seats 1.exe
-
Size
284KB
-
MD5
ad127f6a6e823c10e54c779e92f4ef91
-
SHA1
26a021276b982afca759e04b62d3cb4caa4269fb
-
SHA256
d9e7d9699b28022d1fd6b5ced9f32e3dd3210475d6a2b2ec770d331d6a910a53
-
SHA512
8548b72670635335e8b62f699729881347931312d1843817d28a194142901eae6e29798611bfc299d4302c78aa4b99e24ed537d20d81f69e91e2b52a6843cc46
-
SSDEEP
3072:s+LwLS2Vbqe+uZtuQ0UzDNwwh0wR2c2vGZ9pwPtV3vJPg1NXHII61gdZwgJRZ/2J:wEe+iXFBwhw0cvxwV3vaHIIiHF
Malware Config
Signatures
Files
-
Air waybill number 290132727 Physical weight 1 05 kg Seats 1.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 279KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ