Static task
static1
Behavioral task
behavioral1
Sample
Documents of shipment 3-2024.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Documents of shipment 3-2024.exe
Resource
win10v2004-20240226-en
General
-
Target
Documents of shipment 3-2024.exe
-
Size
714KB
-
MD5
779222c4ace4e7726fc76dedb4394b77
-
SHA1
da183b07419ffb0fa4b72230cf540e8a09c64a65
-
SHA256
664db26a69e4b1efb10289189887c35558bf7ca966eed02f97e523fef83f1205
-
SHA512
b94ce6cba6aef492335628dc2456f3e7457e5f23ad646c5aa0b9464c9995f9bcd1df206d9d7563c7870566fac104eaaf900677f725041f197773f5d57248e5d0
-
SSDEEP
12288:3fHwgqPPhZakohW1yCuTuFBQNfLTiYCDLxBAaOWHMoMYw6WsviE8O1QX9zXiUvlJ:fqajgsCuTSBefLTVn5SMYw6WsqE8T9zB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Documents of shipment 3-2024.exe
Files
-
Documents of shipment 3-2024.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 712KB - Virtual size: 711KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ