Static task
static1
Behavioral task
behavioral1
Sample
ZH1-MED-D23009 ZHENGHE MARINE SHIPPING INTERNATIONAL LIMITED.scr.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ZH1-MED-D23009 ZHENGHE MARINE SHIPPING INTERNATIONAL LIMITED.scr.exe
Resource
win10v2004-20231127-en
General
-
Target
ZH1-MED-D23009 ZHENGHE MARINE SHIPPING INTERNATIONAL LIMITED.scr.exe
-
Size
55KB
-
MD5
805a081e8c228745bec313d2465f335b
-
SHA1
619d856476a7f97f847a11c894be0c30f73ee484
-
SHA256
9eba94a32004927781aae20ddce4940bf4b8673f0deb6294dda2a8578c51a486
-
SHA512
e9cd6dd0a1c790909e5f38039720049dc509229b79d5c2b9d7807cc81a0b2ef59fa9e270d2121ae6897393aa217526ba9352e973eddf063c45176ce86c0e167d
-
SSDEEP
768:2YcjHgagv5yprtup2pW7Q3Nc7TPJqMFBzaTUFfvMeaAz7rBLYhmjsK4pyNsxfD:grgvitFp3MWTUZNaAXdLYhmjsKsy6xL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ZH1-MED-D23009 ZHENGHE MARINE SHIPPING INTERNATIONAL LIMITED.scr.exe
Files
-
ZH1-MED-D23009 ZHENGHE MARINE SHIPPING INTERNATIONAL LIMITED.scr.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ