Static task
static1
Behavioral task
behavioral1
Sample
Pre Alert - Ship Docs/Pre Alert - Ship Docs.xlsx.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Pre Alert - Ship Docs/Pre Alert - Ship Docs.xlsx.exe
Resource
win10v2004-20240508-en
General
-
Target
06e9205791eba37e10fcc9edf27f2a515f5ab835d32626d30aa54dea6043199a
-
Size
263KB
-
MD5
aaff34d6b86e6067bbaa57e497ff56f9
-
SHA1
754c5b8f0a68d39bec76a575c814466cab445144
-
SHA256
06e9205791eba37e10fcc9edf27f2a515f5ab835d32626d30aa54dea6043199a
-
SHA512
9a7139b70847f59a39548263defd4473a294902825c4d470ac122a406b69b81c11b3cad58b505bd1dbecdc05acee63b3a155dddb34c3d5d3859af4aa2a61b3ce
-
SSDEEP
6144:OptJNtOjJ88W0vIjD6/pVXQmvPNyCs65QheHt/7tnyoQkC3:4pLn0vI3uf1yCs6KYHt/1yhZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Pre Alert - Ship Docs/Pre Alert - Ship Docs.xlsx.exe
Files
-
06e9205791eba37e10fcc9edf27f2a515f5ab835d32626d30aa54dea6043199a.zip
-
Pre Alert - Ship Docs/Pre Alert - Ship Docs.xlsx.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 348KB - Virtual size: 347KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ