Static task
static1
Behavioral task
behavioral1
Sample
FedEx Receipt_713410373717.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
FedEx Receipt_713410373717.exe
Resource
win10v2004-20230703-en
General
-
Target
FedEx Receipt_713410373717.exe
-
Size
498KB
-
MD5
003d1f54eca930067e228348db629527
-
SHA1
0654be62bcdcdd652b934e486c536ffca53b4b83
-
SHA256
efbb2173094d1b5e4bac991b8f7659607aae035119d7f18d92acbd53f1089cf9
-
SHA512
06b0487dee32e8e60623e7d92d11176e368ce54ed7164e820b97944a0d996e1bc5408470ac3058812e639b4de589a447bc7b328913c58e0016ed388ff9031144
-
SSDEEP
6144:M32csfOqeazCR9aYZhJjZeOwkLOiO9qW0ALoIe/TahfX6Jg6wWQ0kjs94Z2Gg6IK:bPYe4qHqW0A8TifXj6whFs94oGg66a7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FedEx Receipt_713410373717.exe
Files
-
FedEx Receipt_713410373717.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 496KB - Virtual size: 495KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ