Static task
static1
Behavioral task
behavioral1
Sample
Ship Docs YINGHAI-MANE PO 240786/Ship Docs YINGHAI-MANE PO 240786.xlsx.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Ship Docs YINGHAI-MANE PO 240786/Ship Docs YINGHAI-MANE PO 240786.xlsx.exe
Resource
win10v2004-20240508-en
General
-
Target
c565b3b18afe235b6e2b064649b58ddc93b43c1a86d1ba379dc9e19bc8d5dafb.zip
-
Size
267KB
-
MD5
103a04bb60e29bc03cbf8f5efe1a0498
-
SHA1
00f9974355cc280f1da546b28a9425fb26f0512d
-
SHA256
c565b3b18afe235b6e2b064649b58ddc93b43c1a86d1ba379dc9e19bc8d5dafb
-
SHA512
5213967d7bb1816fd89710f6cd1517f6cda5e41ba56c41ae6e35f4d7c334e9375fac7088c7b27cfd6fddbbfd510eccb4503980975d61d60ca39ac330050f8f2b
-
SSDEEP
6144:ffr83iHBSdGjCMaMO6S/13winkAqoGg3cZlbIxgdL9V80cSmMPq:fwyH5GMaMfSdPkAtGnl9dL9G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Ship Docs YINGHAI-MANE PO 240786/Ship Docs YINGHAI-MANE PO 240786.xlsx.exe
Files
-
c565b3b18afe235b6e2b064649b58ddc93b43c1a86d1ba379dc9e19bc8d5dafb.zip.zip
-
Ship Docs YINGHAI-MANE PO 240786/Ship Docs YINGHAI-MANE PO 240786.xlsx.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 367KB - Virtual size: 366KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ