Static task
static1
Behavioral task
behavioral1
Sample
Bill of Lading Toll - TTPE6214848....................................................................exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Bill of Lading Toll - TTPE6214848....................................................................exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
HBL#TTPE6214848 03-09-SO-6538 (SO+INV+PKW) BL AMD....................................................exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
HBL#TTPE6214848 03-09-SO-6538 (SO+INV+PKW) BL AMD....................................................exe
Resource
win10v2004-20230221-en
General
-
Target
HBL#TTPE6214848 03-09-SO-6538 (SO+INV+PKW) BL AMD.rar
-
Size
1.4MB
-
MD5
8be8050cab49b272557c1861386952f6
-
SHA1
9c75753e90201a8d64889b85dda5e9361152b083
-
SHA256
93bce4432ef4465467c7cfb877ba129c2951d9a3e5fc0b5c64fde11143d48b6e
-
SHA512
c8aea299183fb8941e000012966c4979f38e13951f4c10a1488b91875a5043f63851f6cc40a99f8baea8a819082d94c1f65b8e32607450d3b7660f7836c2b78c
-
SSDEEP
24576:6abr/d8AMMiHUOCo7qDVoRo9zb3rZZKJGabr/d8AMMiHUOCo7qDVoRo9zb3rZZKy:6Kd6j549UoKd6j549Uy
Malware Config
Signatures
Files
-
HBL#TTPE6214848 03-09-SO-6538 (SO+INV+PKW) BL AMD.rar.rar
-
Bill of Lading Toll - TTPE6214848......................................................................................................................................................................exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 875KB - Virtual size: 875KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
HBL#TTPE6214848 03-09-SO-6538 (SO+INV+PKW) BL AMD.......................................................................................................................................................exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 875KB - Virtual size: 875KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ