yDrw.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ARRIVAL NOTICE OF CARGO AND ATTACHED INVOICEBILL OF LADING.bat.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ARRIVAL NOTICE OF CARGO AND ATTACHED INVOICEBILL OF LADING.bat.exe
Resource
win10v2004-20231215-en
General
-
Target
ARRIVAL NOTICE OF CARGO AND ATTACHED INVOICEBILL OF LADING.bat.exe
-
Size
728KB
-
MD5
2b7b2d985d01b8c4daac655e6ea24772
-
SHA1
f3905d34c55bbddb5d17b77a85b2f0b5da3d959f
-
SHA256
f02a705a7807a2273f5ce13acf1d4491ec5d5050394eb3b61c9c274714a01fb8
-
SHA512
fa6d4b6d1c8a33ecbd610bc98998f90088870878d6f79ecf1fd9e757e0bff515f1c704de339034088f8c51158a123d51e728f83a91aced5417ad459f1251afaa
-
SSDEEP
12288:Aa1kIoIFFHgeg/cYE3j3vK/yw6DwEIXVMavWNCBl3U93WYOLJTP2soOa5PvH+:gIXFxYMvuyHDwEIVMavGCBl3BvJT1mn+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ARRIVAL NOTICE OF CARGO AND ATTACHED INVOICEBILL OF LADING.bat.exe
Files
-
ARRIVAL NOTICE OF CARGO AND ATTACHED INVOICEBILL OF LADING.bat.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 716KB - Virtual size: 715KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ