Static task
static1
Behavioral task
behavioral1
Sample
Shipping Documents PO33877/Shipping Documents PO33877.xlsx.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Shipping Documents PO33877/Shipping Documents PO33877.xlsx.exe
Resource
win10v2004-20240508-en
General
-
Target
6fcadc34eeda4afac077489aeb90d0dd0ea91ad5b0d74778f74e7a2270b9de3a
-
Size
266KB
-
MD5
36be0624bad180f1173339fb2d5b029e
-
SHA1
0b0f737e9b9f449f96ef993cb938a1859a05b873
-
SHA256
6fcadc34eeda4afac077489aeb90d0dd0ea91ad5b0d74778f74e7a2270b9de3a
-
SHA512
5497dbbb3b603be2ce838a91527dfd01e1a21cb94e6750dba592eb4fcc68e18bf9eb25dab6610c5b5bc2c912edef977e2924584d56d2b0f04169485d3f55057f
-
SSDEEP
6144:2zqKLhdo2kNzd13taN4ae5k3GIQyzyf2ht0JefMboB+KE:3sXhslk3GIQyzmktrfnB+KE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Shipping Documents PO33877/Shipping Documents PO33877.xlsx.exe
Files
-
6fcadc34eeda4afac077489aeb90d0dd0ea91ad5b0d74778f74e7a2270b9de3a.zip
-
Shipping Documents PO33877/Shipping Documents PO33877.xlsx.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 358KB - Virtual size: 358KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ