shipping Documents[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

shipping Documents.zip
Size

643KB
MD5

4ac9eba74add2445405efa0590458882
SHA1

2e85d1a538ebf1d50015dc14af0e75d99cafaf4c
SHA256

f0525b1d80f98cc788e43728ac36f19e430e2c5078fc489d0c68f55f78a08114
SHA512

3242cc0cf2406198b78e037afcfc147d6b3f3a939f58d6cb2fcb41b40eb66059c2ec773433da8fcbf4c3e885e8580f51e4bd42d4cb58f8c747930f1930e214a7
SSDEEP

12288:FZikbUc/xIybGuy+W/Z+TUC3bsl++BLlk5LNjpQxQYM7Ftvw6mAf+gbKZ06VgS7t:LioEyaB+TrIzmfuQnrwAf+BVgC9T

Score

N/A

Malware Config

Signatures

Files

shipping Documents.zip
.zip
shipping Documents.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 719KB - Virtual size: 718KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ