NWpp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Shipping Advice.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Shipping Advice.exe
Resource
win10v2004-20240426-en
General
-
Target
86a4d839f2b36aba807d9b10b20430141b5e0336cb251d2f19c7a419bc9ad840.rar
-
Size
692KB
-
MD5
16fb49aa09cb616df3f0b6c134dd9a19
-
SHA1
68512d25df736e3317ca4114a42cf2e4e4d7f91c
-
SHA256
86a4d839f2b36aba807d9b10b20430141b5e0336cb251d2f19c7a419bc9ad840
-
SHA512
dd9dfea9e05f93892034ad0bd3f45307bb7b6ccd3d53634bafde0f4b3c5ff69d30d357fa7e6adf0dd9545da7dbb71840d1c901ee3ab164b620e38b76f05849c8
-
SSDEEP
12288:ZLwrWruqZCu0xaNyL4wkvbdanWxfsUE4mL8uduOm1+xQGScZPEaulb614FCq:mCKqZCFQZ4WVpEJV0auR62j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Shipping Advice.exe
Files
-
86a4d839f2b36aba807d9b10b20430141b5e0336cb251d2f19c7a419bc9ad840.rar.rar
-
Shipping Advice.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 706KB - Virtual size: 705KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ