arrival[.]pdf[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

arrival.pdf.zip
Size

617KB
MD5

e7d23a435e59812b20d1a276d59944d4
SHA1

832c33c1ffd3f110072dbebb29da2e8778d19684
SHA256

05f5a6ac6cb85cc3554bb8701cfdad3c9e9cef024a275023a822cf32b38e6e98
SHA512

8ff52dc7c0ca302ae5d7ba9b06eb9857c97d7c99bd831c4479d6b7f9064f11439d15a7b7b44419da1aac3d8be3909f36067670492beb6b6e455c3d761160e9c3
SSDEEP

12288:LNLHMnXvf9BhuN5JlZ90k3mY2GlwxXcbhHQQ0HUGFqmBCCpw4m9/bsxa9:9HAfFaJlz0kWMl+eHQf0GwmBUB9/bsk

Score

N/A

Malware Config

Signatures

Files

arrival.pdf.zip
.zip
arrival.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 652KB - Virtual size: 651KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ