Static task
static1
Behavioral task
behavioral1
Sample
SHIPPING DOCUMENT_82OA2910T000735W_PDF.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
SHIPPING DOCUMENT_82OA2910T000735W_PDF.exe
Resource
win10v2004-20230621-en
General
-
Target
SHIPPING DOCUMENT_82OA2910T000735W_PDF.exe
-
Size
640KB
-
MD5
b97b7333d3d1dc75f4e277fa7d32c3e9
-
SHA1
78ee0c2671f184ffb760980c4ebe8ed183f2f60a
-
SHA256
2f036c71abb4a6833f85d3d0ade25918b4fbb6282ccd6d48ddf8e2d75f66f519
-
SHA512
9e0bef4b3e4cc80234d5f57f612f5e62f640a4da3d7312ce7cb1291e511a75608ab6eda463e5bbd36d716137055c4207b02d893b866d8d52857a147359a0f75f
-
SSDEEP
12288:vGmd2iNRdpeuFOJ/JSSM07eX7Wu6w0sKyOSejKc6:11ndpegE/JSe6p6SKyO7Kc6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SHIPPING DOCUMENT_82OA2910T000735W_PDF.exe
Files
-
SHIPPING DOCUMENT_82OA2910T000735W_PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 638KB - Virtual size: 637KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ