Static task
static1
Behavioral task
behavioral1
Sample
Bill Of Lading.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Bill Of Lading.exe
Resource
win10v2004-20230703-en
General
-
Target
Bill Of Lading.exe
-
Size
723KB
-
MD5
3c8acf213d4df07aa57dcfab3424b7cf
-
SHA1
f4644fd0a9a747a31026560e5250e22befb9b0a1
-
SHA256
9744a5d517cee9bb8b6a1816d17ef0a9a16ade3fcaa2cd4880020e3de274b8d3
-
SHA512
5862234823a736f21833e225aa2965a7ba25ae4e59cdd7ece8f799bfd331c82a31ac21b466a646d84dfc2581f6ed76d70f3826b8b4f216c38788c5aebbcdfa3a
-
SSDEEP
12288:aWb6DNdh6V72d1mbTE0PobliA+uhPz8hulTPC41erMasM+jnU8duP4fSWH49:TLVzEvlhr8huhPC+erV+w8xna
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Bill Of Lading.exe
Files
-
Bill Of Lading.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 721KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ