Shipping Document_PDF[.]exe | Triage

Submit
Reports

Overview

overview

Static

static

1

Shipping D...DF.exe

windows7-x64

Shipping D...DF.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

Shipping Document_PDF.exe

Resource

win7-20221111-en

agenttesla collection keylogger spyware stealer trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

Shipping Document_PDF.exe

Resource

win10v2004-20221111-en

agenttesla collection keylogger spyware stealer trojan

windows10-2004-x64

9 signatures

150 seconds

General

Target

Shipping Document_PDF.exe
Size

865KB
MD5

5e1c0b9b2db4426d9fe3b72282a0c8fd
SHA1

a176140740c3c343e23747189abaca7890147dba
SHA256

0e7ffc02457986adfdc39077de4541c0b33b5588bf842229ed091b40ce4cc96d
SHA512

ee6ad2b5b4611c0a71a4537880e97bfd3e7cc3becdc1caf98056fcecdba0b68797371f386c2a9337c2d4b04d509855e55875f1a482e16aac2ada48cb17a5d557
SSDEEP

24576:ZPRKiswt9dB7JbLH2B8ec4i1/gSKVe59E/7Y9Cb:xPv7JWLc4iR9gY9C

Score

1^/10

Malware Config

Signatures

Files

Shipping Document_PDF.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 856KB - Virtual size: 856KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

© 2018-2024

Terms | Privacy