Static task
static1
Behavioral task
behavioral1
Sample
Maersk_Quotation_XIuYSF2sY4wI7pe.exe
Resource
win7-20240508-en
General
-
Target
Maersk_Quotation_XIuYSF2sY4wI7pe.exe
-
Size
522KB
-
MD5
f45b1ef0b8c2653b0e858c1760c610b2
-
SHA1
e9feae326fe61d7d6e8310a0461c0a41ebdfc188
-
SHA256
2af57029908ba3701cd08efe856d0396b43500127ada231da75cb73c795c727a
-
SHA512
23230519e9ac1d78d1788a88937f1c0bf2abc06d2d4981961110d305fdb7f677cf8ae6259c23fa0dc1231af65f09dd3c44da373f7fa39373538abe0e33ce835a
-
SSDEEP
12288:1jth71EMA+P+8n2MTDgba0OpVcDQjmU/RjXf7vsuVFGW5ZUWxiN85Hv:1jD1pA+28hTDOa0OCQ62fuGZb5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Maersk_Quotation_XIuYSF2sY4wI7pe.exe
Files
-
Maersk_Quotation_XIuYSF2sY4wI7pe.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 517KB - Virtual size: 517KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ