Static task
static1
Behavioral task
behavioral1
Sample
Shipping DOC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Shipping DOC.exe
Resource
win10v2004-20230703-en
General
-
Target
7cd3093e664cd4b8e735f8685633e3eeefa84629071f896831706e8f7246fb73
-
Size
685KB
-
MD5
764d82bd5ec41e48582d0f31688538d9
-
SHA1
ecd97896bc541197246fceba7349ec7294963af2
-
SHA256
7cd3093e664cd4b8e735f8685633e3eeefa84629071f896831706e8f7246fb73
-
SHA512
2cd03ceed6cd10417a7ee28cfe74ff986c8c3c8e7297c67d2294913e33243e3821f84f0cf4ec93cac5d61d37ad3a28698e9b2acb7e8fa85637b4f600aac8fa09
-
SSDEEP
12288:xyTztDe/r1z8G50dD5HdLw2M3XfbUBeELFrjyZaJ4nHDcHHp8CNvxemik:MlkR50DZKl3zUQUVjy44Ap8CNv0mik
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Shipping DOC.exe
Files
-
7cd3093e664cd4b8e735f8685633e3eeefa84629071f896831706e8f7246fb73.zip
-
Shipping DOC.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 739KB - Virtual size: 738KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ