Static task
static1
Behavioral task
behavioral1
Sample
shopshipshake.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
shopshipshake.exe
Resource
win10v2004-20231023-en
General
-
Target
shopshipshake.exe
-
Size
2.7MB
-
MD5
3f9f5e3e2bdaeaae607d2d06c8d119af
-
SHA1
5b1d76b79f11bee55d7d6233a7954483e1180509
-
SHA256
7e837ffd79e82f067ffc849f6d3e0909a3c423322a9542fc75f9527ea6f22e48
-
SHA512
b880d7d1b3b341f10631dcb763778b1e77ea34aa39fc94a6087d8a8069b49f99fa0a681be238ac98af73b971e5429d92ec3a09739458c386d52e189579584fc4
-
SSDEEP
49152:M5R2xcnl++++++++++++++++++gKj++++++++++++++++++gKQC3gnhomvddddNX:M5AKUKQMgnhomvddddvtQdFK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource shopshipshake.exe
Files
-
shopshipshake.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ