Static task
static1
Behavioral task
behavioral1
Sample
A01_Shipment doc _for_ASL H1209.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
A01_Shipment doc _for_ASL H1209.exe
Resource
win10v2004-20230703-en
General
-
Target
A01_Shipment doc _for_ASL H1209.zip
-
Size
438KB
-
MD5
e15f81de38c4a82994abbed275f8496e
-
SHA1
32fda8c328bdc0c6939cebce82112af7d1ab5b71
-
SHA256
359b7dca0b14c952c35a570272b3d9c3a9d6aa7eaebbbf8cd6a26413f09d20d0
-
SHA512
392bb6d21cd55a9e3d338f4574695ba736bec9d4557f7b583579af61016f8385eb6530a050b787240ad5f2e4dc03cc4ba62b771c503e40f31b8217bf74c05e4c
-
SSDEEP
12288:uGZKGno/OfkWTmG4NoYK7gg2SNBoIcrO8bxbvO:uGZrcekWX42hH2Sr6S4DO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/A01_Shipment doc _for_ASL H1209.exe
Files
-
A01_Shipment doc _for_ASL H1209.zip.zip
-
A01_Shipment doc _for_ASL H1209.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 493KB - Virtual size: 493KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ