C:\Users\computer\Desktop\Outputs\EemsbncoNl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ShippingOrder_ GSHS2400052.exe
Resource
win7-20240215-en
General
-
Target
e8c9c4b2977e55ce7a38b2367a01ad0e.bin
-
Size
65KB
-
MD5
f454ad27ef6eec6da88cf5e347729425
-
SHA1
739b3cd84a1e4b9cd0870e939ad541b322d4bd98
-
SHA256
4e6ae61c065760f510a7fe3096ceb2f2ed067a3ff1f926b4a457afe0d104cc9c
-
SHA512
92b49d9b82a812893056b9a713dfeac378b131c7c6b89eb9d6c9baa4ca42e1af5b8bbc20744f0e82967e52be5ac01d8e1a46e17f1cfdf10a144d8b0279712fe9
-
SSDEEP
1536:2BKlSIjwvg8TVJaO2KZTc0GVG6s8nAT7gLi7JrpEeQeu:2Bsjwvg8TnX2Kpcu3d7gS5hu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/ShippingOrder_ GSHS2400052.exe
Files
-
e8c9c4b2977e55ce7a38b2367a01ad0e.bin.zip
Password: infected
-
aec64a639bd0aedb740d3fde3857f4e3aaa863e2a46a56da759b6aa66e079cc7.7z.7z
Password: infected
-
ShippingOrder_ GSHS2400052.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ