Static task
static1
Behavioral task
behavioral1
Sample
sailing ordersvessels details.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
sailing ordersvessels details.exe
Resource
win10v2004-20231020-en
General
-
Target
823a695d39a3d906ede74d93a6518158f31e6ce7cfecc8884f93428bf1016027
-
Size
328KB
-
MD5
f5dfbed3679a4418d2384dfcdac37d84
-
SHA1
be2613c00b6a91030a727ca344dd58a13104bdc3
-
SHA256
823a695d39a3d906ede74d93a6518158f31e6ce7cfecc8884f93428bf1016027
-
SHA512
ef9943408a68eda82614c098d46853c37c8dfecf8a886550e898599a2894f6644f2cd2fd1f4918f6f3dbbc35e90a149e8ad7a15c57454ead481eefa9d6f48d74
-
SSDEEP
6144:4WQvToCDyF51Om2Kr23HtJu80h+4gurSsvjPiWkEusm16Kd/2+J0IrkDos:4WQrg5Hr23H8h+krbjKBEuf1nJ345
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/sailing ordersvessels details.exe
Files
-
823a695d39a3d906ede74d93a6518158f31e6ce7cfecc8884f93428bf1016027.zip
-
sailing ordersvessels details.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 429KB - Virtual size: 429KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ