Static task
static1
Behavioral task
behavioral1
Sample
SHIPPING DOCUMENTS.exe
Resource
win7-20240903-en
General
-
Target
c644ca7f3f797ba602a1880f1cd49fc108ee0779fea2d8b8322d0d768e2182cd
-
Size
656KB
-
MD5
efb3a43b1cfbb0dc455f5d8d036533e8
-
SHA1
23029a52473d45af3a61fbc6238fc9d9d9ee7750
-
SHA256
c644ca7f3f797ba602a1880f1cd49fc108ee0779fea2d8b8322d0d768e2182cd
-
SHA512
55f45c57bcc25e090cafc4510db3e4a3f6cedc7909cfb7e44113487f93c69324899e1896eda4d96a0a2aebccd5b32369434633499f2f6bdcfcf0ccc9595170ca
-
SSDEEP
12288:NnHUWMcIf66KKpbyvjx/YAvE1d2RVep12wKEd1tymIM7avW2Po8oJa2M5+N:B/McB5hOAy2Ropd31ImIM7avvPoFJS+N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SHIPPING DOCUMENTS.exe
Files
-
c644ca7f3f797ba602a1880f1cd49fc108ee0779fea2d8b8322d0d768e2182cd.zip
-
SHIPPING DOCUMENTS.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 708KB - Virtual size: 708KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ