Static task
static1
Behavioral task
behavioral1
Sample
Shipping Documents PDF.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Shipping Documents PDF.exe
Resource
win10v2004-20230220-en
General
-
Target
Shipping Documents PDF.ace
-
Size
857KB
-
MD5
93fb43c4d348003fc397d0db3d8eb6a3
-
SHA1
7f1fa05dcf24ceb6c259ef0bf1d9e6542e59b954
-
SHA256
79899b5baebf1bfcd986c947d01094890a7f67d8ed9900aae173f9af20fdda49
-
SHA512
9bd08fe38bcbf563564c98c4d95968c24bec213da822623a0539c41b61d05931b3c9b75eb475237835ac112f9699e9d01b2d22ecaad1be6a27d761b80a3eb57e
-
SSDEEP
24576:OoiK/2Au+xOz7Kk6vZRPXpj7l93MmYXcsQA5PFpr1:OoiI21+xOzbgZRx3l93Mzc/EPFpp
Malware Config
Signatures
Files
-
Shipping Documents PDF.ace.ace
-
out.ace.ace
-
Shipping Documents PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 918KB - Virtual size: 918KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ