Static task
static1
Behavioral task
behavioral1
Sample
FedExReceiptAWB53053232046343.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
FedExReceiptAWB53053232046343.exe
Resource
win10v2004-20230220-en
General
-
Target
FedExReceiptAWB53053232046343.exe.bin
-
Size
598KB
-
MD5
1577c40b9d466fa0c5330156f88b0f05
-
SHA1
dd8afc29133897ce0a2013861fb35a71269fd301
-
SHA256
cdca513e22701403a62e153f5d197a4d7e3f0fb3ed18f66021e00b7b3720713a
-
SHA512
56cfbb793b0379b37d476d82203f6c9fe0acf3cd3a433e72321ab1968272808af4d2b82ede3cdd10ab1ed32908fa9b474df60b8422543ede3f70b96218baf5eb
-
SSDEEP
12288:5OcKB4xnueUElbBvxsXxs2egQVt2hoBraUUbf2MwVAixGz9v8a90jH0DtB5NNtcK:643UElbshso6QUw2QNS+t3N+s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FedExReceiptAWB53053232046343.exe.bin
Files
-
FedExReceiptAWB53053232046343.exe.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 586KB - Virtual size: 585KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ