Static task
static1
Behavioral task
behavioral1
Sample
telex release bill of lading + pre-recorded release note.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
telex release bill of lading + pre-recorded release note.exe
Resource
win10v2004-20240221-en
General
-
Target
40d643b42ebe67f430ff2d1613f88b215262c68f52e15eb92ae8b16e3b16e1b5
-
Size
665KB
-
MD5
c2b8c2bdf8bd217f9f0d97d2b9e9095a
-
SHA1
5ba84ab188b84c4205af32ff0f4c8844ca561eba
-
SHA256
40d643b42ebe67f430ff2d1613f88b215262c68f52e15eb92ae8b16e3b16e1b5
-
SHA512
02e387157a7bc8771a2841b47f4123e96d13704ff92d7d51ffcfb9b26fa510cc93513f242cbe1d4b06e515d6699a1e6cded2fb3587c1a2139a0968eb2477c731
-
SSDEEP
12288:H6JzMlu2iGAYDGqcobTg4BeRerx0HHNk/c8AQTuV5hXgv+XnMQeG5/J:aJzXGAYiqc08wEk/dAQgng2MAx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/telex release bill of lading + pre-recorded release note.exe
Files
-
40d643b42ebe67f430ff2d1613f88b215262c68f52e15eb92ae8b16e3b16e1b5.zip
-
telex release bill of lading + pre-recorded release note.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 666KB - Virtual size: 665KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ