arrival notice[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

arrival notice.zip
Size

664KB
MD5

5cc5088875572366cabf7f50ff7b795b
SHA1

46a954429d5afabdde461c2caae839113fd8bcaf
SHA256

246178e5a70ad85c7932c2d594bea255f5acb9bf18ffbfefa55319fa6f3a40a5
SHA512

c47cb55bc69e469ce9d8186ff443118ab6ee4006970a6ea7486755853fc3af0b255a25564356f2c8d52b44f1a7c5cf0232549bc2bb56b41cebd8cb04e7925f93
SSDEEP

12288:8D7y+pMQA7fW8sPv9NLy1Sqc16S6vNVC098OQsnTrycW6WXGBR:8nSQA7Iy1/26S6vNkrA1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/arrival notice.exe

Files

arrival notice.zip
.zip
arrival notice.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 731KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ