Static task
static1
Behavioral task
behavioral1
Sample
Shipping Docs.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Shipping Docs.exe
Resource
win10v2004-20240426-en
General
-
Target
Shipping Docs.7z
-
Size
354KB
-
MD5
0a6dea6b418e40394911b660860cdb66
-
SHA1
f2d0aa8845291e676f5a7d052dbe54b94d73e438
-
SHA256
25a1319c7c2587b9f14ad696dae93a00b0d52bfe1637c6f2354d33d2455c3549
-
SHA512
8cde8a579159e1add39282f955f4f7976b8632e52cb16e95984224a80b30637e16bc693e2b5dfc522fa94cec9390eed84a5e39b913686fe7e0efdb74fe3a0c86
-
SSDEEP
6144:iXcy5xBUNhu8e33ckXibCgP6Jti2NjG6DDjnmHjADzLwq6ZI:iM5Be33ckyfgfNjG6HjnmHEXkBC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/Shipping Docs.exe
Files
-
Shipping Docs.7z.7z
-
Shipping Docs.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 326KB - Virtual size: 326KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ