bill of lading[.]rar | Triage

Sharing

General

Target

bill of lading.rar
Size

704KB
MD5

afbf4e8bd40ed0c718901278efc59bd6
SHA1

c2b815a35416926661aca19067f168d19a459d4f
SHA256

6c1883906e4f5dc4dcd4b8ee62171ac7c708748c0718a8a3b992626a0fe9eff5
SHA512

bc017bf37955d40d60d676f9c05c7ea334deec85dec6c65639ff2a8016ca172613bbf3c01f65346a63eb26a4d0ed6161bf984272af134d50abe94ebd87ca671c
SSDEEP

12288:47qXGQo9y4i7peF59HVNgmJ+ew17sZePpYpwiu1nKT1sNwT:4Ao9Ti7paHbBJfwRXPpzib1s+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bill of lading.exe

Files

bill of lading.rar
.rar
bill of lading.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 801KB - Virtual size: 800KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ