Static task
static1
Behavioral task
behavioral1
Sample
Attached Delivery.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Attached Delivery.exe
Resource
win10v2004-20230220-en
General
-
Target
Attached Delivery.bat
-
Size
604KB
-
MD5
acd21eb177f20bc247b9ad6570bc42ef
-
SHA1
d0e65537dac04978ca943ad32af5631754fb2d50
-
SHA256
89e7dbe2c5f19b2d87b89124369b11a9ed649ebda05ce6d88a90e4814435d252
-
SHA512
65ed3e0c61e7a3203e37fd71ad326398e1ee558237ff2bebc2cdc1648797f83fe2eb2b0ff3085bcecc5bc9e938005b4a4527116ef40c119942f15152dc0de43f
-
SSDEEP
12288:32Y53lza953riWLXIRALKmTFlaa47bREJSwCzc6t4GwTEcxY:GY5ly5x41mnah7bREJSwOsxY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Attached Delivery.exe
Files
-
Attached Delivery.bat.rar
-
Attached Delivery.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 679KB - Virtual size: 678KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ