Original Shipping documents[.]r11[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Original Shipping documents.r11.rar
Size

759KB
MD5

cee56cf84777e70ed21732aae81c8fa6
SHA1

5424059ba4533518f40a44327eec2a12113af43e
SHA256

ffde019f0abdb72b5eaa52fed78f782c3933e4de5442ca12abd932cacef48fff
SHA512

15c4a57de3803f88ac8532970d707644bad4eeab240e65ac727176e17444e99d94bf2445d489202c0c4bdc3a0587137e6d1ba329e84e8d04010fa5b460ac1730
SSDEEP

12288:uq5GRMQAGnwzcWQl7loK/j15afD3Ay3VuIjiXB2uo6wrdIzu7YpIcgNYGrFCBAWd:6M4410ho655af7AAzj+2uKhIzu72wrFM

Score

1^/10

Malware Config

Signatures

Files

Original Shipping documents.r11.rar
.rar
Original Shipping documents.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 942KB - Virtual size: 942KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ