Static task
static1
Behavioral task
behavioral1
Sample
FedEx_776288738390.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
FedEx_776288738390.exe
Resource
win10v2004-20240508-en
General
-
Target
ef514e4680b3e55be0b726d22fbf85ef.bin
-
Size
647KB
-
MD5
33222c489da4c637d1188006b41cd4b2
-
SHA1
35209f2731066e7b606d37d5bc7ac19b5fb11553
-
SHA256
9fad55147990d287d01a5a69a88a3ad245735c66b18cee0e47287b93a427884f
-
SHA512
55898de3d3b72ddd0b8233ed4a17e1935014db8bb96d135d9fee9df6ea0b9ee929144ac2c5e415f99e7719d9de8bb08a22231dd074948c822c93f9b2d5a9830b
-
SSDEEP
12288:on4pewOjqSAAj11UpvNfNFZGVo6Xp2r3f1BmaSXzHOOrn8/I4ju5BuSpSIUK3ebR:MjXjJhz8vpZGVo6Xp2rdOuOrn8KuS9zM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/FedEx_776288738390.exe
Files
-
ef514e4680b3e55be0b726d22fbf85ef.bin.zip
Password: infected
-
ba44c0b2695b4c7b34218756153ff78010fe431fc0704251f44bc750c3dfb43d.rar.rar
Password: infected
-
FedEx_776288738390.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 727KB - Virtual size: 726KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ