Static task
static1
Behavioral task
behavioral1
Sample
Shipping document.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Shipping document.exe
Resource
win10v2004-20220812-en
General
-
Target
Shipping document.exe
-
Size
456KB
-
MD5
61c2d34e955dfb1ab1919c0e5dc4ac43
-
SHA1
99e9fdf5ecbbcc854955dbd1188deb10d9d36059
-
SHA256
9a442ff6604cd89ee5f4fdf085e272ff9b0f3619ebe3b94652ae0c25679c3813
-
SHA512
73b2a8af50a4bf498c9915e19552713ca7e442cd267bf3f99d1d72bed90478b92ed01eae8f6c00e3e4984e60ad6d943bfab4f5e2dc3ea3bad529de4b92b881a1
-
SSDEEP
6144:GaNc1rUxOSgurNkGrIYllsQ3NZF9O8SMytNSeeCUsAcdhkgH0QwpWqflsTz3HxyS:/YbSz5rn2E9OTMybvepqT0cPTMs
Malware Config
Signatures
Files
-
Shipping document.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 455KB - Virtual size: 455KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ