Static task
static1
Behavioral task
behavioral1
Sample
vessels details.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
vessels details.exe
Resource
win10v2004-20240802-en
General
-
Target
vessels details.exe
-
Size
483KB
-
MD5
9801bfd3db1dd7d6d16bdb1fb822ddba
-
SHA1
7bab08a4e87cbff5c3e25505eaf5a15948d0d482
-
SHA256
d0f2b9c05f739d86e1b664ff41c9e2bf2333b6c5d17253ee90f77c5f2d61052c
-
SHA512
46005c9b35daf0283a42ed3c980e2afe1c533602f2db2b09c393707ca89f0225d3fe1637ded395e147b17b5ecc8f2d9f52d2c0256e7f8f1f4e3d816363fc599d
-
SSDEEP
12288:y8G1KBs849ttS9HC+sKIuGwOYGk7ZovH5UPA:2YBy9vS9HfsKI7nS7Zs5UY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource vessels details.exe
Files
-
vessels details.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 481KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ