Static task
static1
Behavioral task
behavioral1
Sample
Shipping Docs.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Shipping Docs.exe
Resource
win10v2004-20221111-en
General
-
Target
Shipping Docs.zip
-
Size
14KB
-
MD5
818b4f67a76a098f86585b7002811252
-
SHA1
8c6843ca603edc75ab6e08b4c25ef28b3dc2d120
-
SHA256
c6abaa1798fdc315947208387a9d98f64df938f08d83d4aae9963e599df8028e
-
SHA512
246f64fed05272b1983ad016e9eb959613eb79511096105d9bc081d896b7c9bcf59804a95f50e114e17b1a8580ce47fa780760eecbdd9ff57f9c0ca01ddec9ad
-
SSDEEP
384:KpTPtNthiBMqXUQcSgcNFOrXa40gZvu/C2K+JJU9j/AZ2R3:C5yMqXncpyShZvuquZ2R3
Malware Config
Signatures
Files
-
Shipping Docs.zip.zip
-
Shipping Docs.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ