Static task
static1
Behavioral task
behavioral1
Sample
fedex09877665.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fedex09877665.exe
Resource
win10v2004-20220812-en
General
-
Target
f9bbda716dcb45b26ef75c5abf4163ad.bin
-
Size
838KB
-
MD5
eeb81e0d3418bbff17de85d2610f8a1b
-
SHA1
528e9d2a534effaa2309805f7bc7da5224960a9b
-
SHA256
25f75afaf24feb67005c776fdec6bda8e97a5a5774409ab5d196a2b840b115a3
-
SHA512
bbd1f4509cb24d050a199b2fb0847cc9bcd3e85fb0185273afc16327fadbbcbcd62e9f35e9efc8a09a85c6022f5dc283aa62ba34b59b6972a5da82e87caaaf9d
-
SSDEEP
24576:UyNblQGUEs0eB4Hn56YMDGRfnSEDXQ0VOg:U//EPHnBCG9SEA0B
Malware Config
Signatures
Files
-
f9bbda716dcb45b26ef75c5abf4163ad.bin.zip
Password: infected
-
8f2071e2108a3b9e9714c6fce50d41bb914c48e15445370f002e71b87e1ca9b6.iso.iso
Password: infected
-
fedex09877665.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 854KB - Virtual size: 854KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ