Shipping Documents � PL & CI[.]iso | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Shipping Documents � PL & CI.iso
Size

562KB
MD5

69b4985f69cbbbf684e042f233a146e6
SHA1

dd1f761b02ce9bb2b742102a29c83c7c6ed7c302
SHA256

2923beb826f3aef1f34e6031523d02a9bed43eb9fdf3732eed4dbc3791ee0d46
SHA512

0f4d0e36d0f5f64cd9d1a1d34997caab4211cb683d2c962f6a6c58c46f7431aa093da8a9ebd0706766654dd48604e1862ae769d4e9b65ad35d54e1ff92678b69
SSDEEP

12288:oEKPM8whxAqR+m8eWlD17pNve4NO31L+5y8ZEezgXEo32IP:ovM8nu+m7AJ7TbNOp+Juez82IP

Score

N/A

Malware Config

Signatures

Files

Shipping Documents � PL & CI.iso
.iso
Shipping Documents – PL & CI.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 499KB - Virtual size: 499KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ