Static task
static1
Behavioral task
behavioral1
Sample
SSI Brilliant - SHIP PARTICULARS.docx.scr.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
SSI Brilliant - SHIP PARTICULARS.docx.scr.exe
Resource
win10v2004-20240802-en
General
-
Target
SSI Brilliant - SHIP PARTICULARS.docx.scr.exe
-
Size
734KB
-
MD5
99a2dbbba55958156c221903df7c700e
-
SHA1
84ec2c5785508d4e664ddae73fabf5d1c50cd166
-
SHA256
a2e0b264504e6338c455b6227e85273903c8f1f901809eeaaaec9e917ffb09dc
-
SHA512
0685f39da02040d9d6cb01c3f6205be5f8dc5c0e6bb56e43b6ff4d7f417ac982a421b962d5410775b1d58f539675532c0cfae90958271ad3a816254fe024c654
-
SSDEEP
12288:JGZKzv9s8BKYvI8mTkwd66kqKncYj3Ye5IrGy6gHc/QwXKfF6AESUx2e3FUz:U8OvD+cYmGyePXoF6R/3FUz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SSI Brilliant - SHIP PARTICULARS.docx.scr.exe
Files
-
SSI Brilliant - SHIP PARTICULARS.docx.scr.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 728KB - Virtual size: 727KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ