Static task
static1
Behavioral task
behavioral1
Sample
Delivery Note Ningbo.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Delivery Note Ningbo.exe
Resource
win10v2004-20230220-en
General
-
Target
Delivery Note Ningbo.7z
-
Size
651KB
-
MD5
5c0014df343ed76ebbdc4913153159b5
-
SHA1
e0d08cde186f297256d06be2fd4aded052a8a120
-
SHA256
301e2739d46b9a675ede5a0a2c9b9eee3095c4de771a7db26844e2d503fb6f07
-
SHA512
47b39d5f7b01f5428de4cde3adadb9a071875d756ef1c095f121ec8a4191c98d3865de14b0d473e2ac1bcd60e544cee316c0212ceec8bcd5e2e33b2ca35152f8
-
SSDEEP
12288:J8aKAp8Xp4DP999i7ytkOs2T71x7lHdn+lmwIC1KSu3JoYSLC:Xpyp4Dl995kH2TBx7Tn47QSuyb2
Malware Config
Signatures
Files
-
Delivery Note Ningbo.7z.7z
-
Delivery Note Ningbo.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 744KB - Virtual size: 743KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 202KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ