Static task
static1
Behavioral task
behavioral1
Sample
Airwaybill and Shipping Documents.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Airwaybill and Shipping Documents.exe
Resource
win10v2004-20230221-en
General
-
Target
Airwaybill and Shipping Documents.exe
-
Size
1.8MB
-
MD5
66300891985d774e47099fe6c8610e80
-
SHA1
96f08959257927f23c4430186d76f42af4c6ff81
-
SHA256
3bf0987f3ee1c806e453a828fc01fa55707f7b859c01243c9f3f4bf7f642dc64
-
SHA512
e91f8e3c809dd552a5df5cbfc3971bc3db07012c8150e53c72b2a90a91be471ebf7a9c2fa0bbee49488909ac041d5bc79ed343551ad69e049b3860de20d2d2f5
-
SSDEEP
24576:LCa+lNsYuHjkovo61rJyOXvPYed7JtZWdNuRyX5O/w8gXcs7Usp5wIQIN/ePHGyW:omjDT/UduutcsoI5D
Malware Config
Signatures
Files
-
Airwaybill and Shipping Documents.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ