Static task
static1
Behavioral task
behavioral1
Sample
Shipment_notification.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Shipment_notification.exe
Resource
win10v2004-20230220-en
General
-
Target
493f0383a996540e99a3cda3eccb328b5fc59b0a51598f80234f97451b9043a6.zip
-
Size
891KB
-
MD5
5d8a92555b0b0a86cb1687540a7b4710
-
SHA1
2303684b623f4c9b4623050cbff776cd4c86bc48
-
SHA256
41d95cbfca1583b7611e3399c0e88a695779fa8f0b28de1c71d452036360869a
-
SHA512
ac7a14f418e7e438caf7a8826ad855b0f9f36f485ef7a977efb8c84a216030e98822902f1e735d55362143e916703e70466d9784c02a6f77ddac99c6c7a34648
-
SSDEEP
24576:Bf0xpkYf6SO5usILcxoVGYdKI+jIA3sT6pibOeM:w1DO52MoVIIQIDTs/N
Malware Config
Signatures
Files
-
493f0383a996540e99a3cda3eccb328b5fc59b0a51598f80234f97451b9043a6.zip.zip
Password: infected
-
493f0383a996540e99a3cda3eccb328b5fc59b0a51598f80234f97451b9043a6.rar.rar
Password: infected
-
Shipment_notification.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ