WKSq.pdb
Static task
static1
Behavioral task
behavioral1
Sample
trucking instructions.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
trucking instructions.exe
Resource
win10v2004-20240802-en
General
-
Target
trucking instructions_1.zip
-
Size
681KB
-
MD5
1cb13a29c3d9aca360521d5c7d69758c
-
SHA1
69e6afe2c1af2b0866f24574ed9e3f099820269d
-
SHA256
29bced37ad996554e9eabf87d93e20b7a4f647df759cb316b8d09e5de5b0dc68
-
SHA512
70dd594c1ea06f961e8413cb32976dd410216d20292018cfab7f6eba2403397fb11a55a563bbecb9bd31b89b15c0f63267e6ed8479f0f5f9bdd5f80d4ef45ca6
-
SSDEEP
12288:O553oKmUZ3I+9JhF94yIjP1yRfHaJSKZnX7WuXzTVazEaUa2DC8WU:O5546fQ1yRfHESKpSuXzSeHhh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/trucking instructions.exe
Files
-
trucking instructions_1.zip.zip
-
trucking instructions.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 807KB - Virtual size: 807KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ