Static task
static1
Behavioral task
behavioral1
Sample
Shipping Documents.pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Shipping Documents.pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
Shipping Documents.pdf.exe
-
Size
522KB
-
MD5
8fbcade12b7f67165d34f5c712bf6815
-
SHA1
d85184c74b90c6912cbedc52683a3b6ebdfdd393
-
SHA256
88c2df27f12c638e7ebd866f6e27b9284e1dd90e07c611a2a581426a9ff9bed5
-
SHA512
08334728a2a1cb564e9c2a8c51d74f2780e4c17597b493ddcfc94d0b9ad5b52165004977be93dea91333ccdb5d693850d8f09730a5bf5457485517c570fb19ac
-
SSDEEP
12288:IjkPoA4fOZ+TzfMXSyuWj+fxrf6a/3EQlpQZTdtyUubJX:Ijk7mOOzfqSyOfL3pQoLFX
Malware Config
Signatures
Files
-
Shipping Documents.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 520KB - Virtual size: 519KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ