SHIPPING DOC[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SHIPPING DOC.zip
Size

467KB
MD5

4c0521b6dd50ac1445dd0c8770930742
SHA1

fa2d3fd0f69b6f816de15d21c4a3df3e9515d557
SHA256

e54105f242bdccb4ad022ab02f3b276217b82859d6046509cd783bdc4d62def9
SHA512

fd1308bb1aac2e7dce4e39703883916d46ac0f2a0d58f985b3075ee292e51272448a53ae9455e94ad02f0a5017d2885d8bb56629b4956c0d9c52552ad2787ea2
SSDEEP

12288:laNyhEzCurjmyS3jSIvfimkQ5Rfj/hNG3lk7:gNyhEFGTK85RfjZNGVk7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SHIPPING DOC.exe

Files

SHIPPING DOC.zip
.zip
SHIPPING DOC.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 759KB - Virtual size: 759KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ