Bill of Lading[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Bill of Lading.zip
Size

376KB
MD5

1db0a09c2a5a62ed82ed485e0fd277e7
SHA1

c2d1f9ffa1e2df1bc9048673d775ce8fa29713a1
SHA256

7af6d7e7f1196273f0aef94f7b3bb451e4ae7e019fb1673873547736abb14490
SHA512

995312b07c89276da0a610b680a2be2c76791016ef555ec892603708a0fc9476c361b61cee34e553920e168d439abfd52b05f94a966a7c310ddd6ad3f2353b2d
SSDEEP

6144:0T+AxYWO4x06tdF5tBotQ8oUKAwNgFL2WIbtY0HLWKtKlDnSSMRBr/BtGHTTfFiB:giWO21tj3BomPABF/iY0HiKtKBnKR4HY

Score

1^/10

Malware Config

Signatures

Files

Bill of Lading.zip
.zip
Bill of Lading.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 699KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ