Static task
static1
Behavioral task
behavioral1
Sample
final SEAWAY BILL pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
final SEAWAY BILL pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
final SEAWAY BILL pdf.exe
-
Size
908KB
-
MD5
c1b8b4e30ea64942210e7708131fcb6b
-
SHA1
e9c5e2c762225ff260711276313b37b8ca5e491b
-
SHA256
1cc3f2ee6a83832c378f4369c71aae81616ebf016af234e6c71e59fa5e807ec2
-
SHA512
6bca34084961117d64be62deb809c6b6aa1273ec7986a2b659434af02b5472cfd01725c30d227b09bb02004762978e63542af3ebc5ffbf042aaeecd2e43e70e6
-
SSDEEP
24576:qwlG1wF9EwXcPd4D4kFFp9FyjQ1W5d+gXd/qwvagNd/xFPoFuywVdDwCbJKATsI2:qwlG1wF9EwXcPd4D4kFFp9FyjQ1W5d+X
Malware Config
Signatures
Files
-
final SEAWAY BILL pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 745KB - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ