SHIPPING DOCS[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SHIPPING DOCS.rar
Size

607KB
MD5

9b5b537794311e2f861455c0cb67f18a
SHA1

409aa22540834f4c747b5347f8d92b07e9c5c770
SHA256

6128a507a5867faee4b566f99fd3a386720357f7b61fd16f5968243d3e33ea8c
SHA512

f786571a035efff87742822552eccf5ae7c6a103495f59c94c955ebfece2a7e19d2d28a5f7b2e2a50c3484de391aeb08d3326b0d03ecf9ae6fd544383b472d53
SSDEEP

12288:ia3/nMrW4raHCNA6+9LaEz8HHguyiwAvazWkWDaihROUHxRAeLUrJRG7tgYR:iM/nMDJhKLaQ8ggviWkWDai/OGLUrrGT

Score

1^/10

Malware Config

Signatures

Files

SHIPPING DOCS.rar
.rar
SHIPPING DOCS.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 780KB - Virtual size: 780KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ