Behavioral task
behavioral1
Sample
DBNote - CRNote - MBL HBL KGNSA2212999 SHIPPING DOCS.exe
Resource
win7-20230712-en
General
-
Target
DBNote - CRNote - MBL HBL KGNSA2212999 SHIPPING DOCS.exe
-
Size
5.2MB
-
MD5
20eab12cfae51f007942bbddacd333cf
-
SHA1
cfb86f23efce6b3bcc9aea05b1e930f387728a6a
-
SHA256
d957e02ba9bfc1670127d3ce98fd09b41c49d13ae6a7abb4889d88cb5f9b5ed4
-
SHA512
12d1cfa0e4aff8d598716d8715d242a2f518d392a31e05f9e118c301b7060b9e90819e6f063aa00f3bb2ecdc50883b2651ae33d579d46e8b124ded879e898b46
-
SSDEEP
49152:/aTh3GvrpJaSp9Jdyzs8PR0SOIxp3CQXpbi45tjPeE27fYb:/adGvrpJaKYzs8PtOIPCQZbJ5NXwYb
Malware Config
Signatures
Files
-
DBNote - CRNote - MBL HBL KGNSA2212999 SHIPPING DOCS.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 316KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imports Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ