Shipping Document[.]r15[.]rar | Triage

Sharing

General

Target

Shipping Document.r15.rar
Size

472KB
MD5

c71b73bf9bbdc9afa20e257a72e38781
SHA1

8b8d66f25ad4984bc0be4375769dc6c2650c2af1
SHA256

f4aa6dc0523add5225185497fa127187527e9bd55365f2fd488843313c221306
SHA512

67c06380e89af43d99dd161a6fa5a6748856b5120fe724e76a28be9f9864b66b47b0fe852561acf3d47c53eb6810238b22b9980dd8896f214c115a55ba9e384b
SSDEEP

12288:xCry5i4bj9PT7JKnD1k4IGpUccIIUeaM+HJlKtHqvFnQCa:O+XPT7sD2YzYyJHCVEQj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Shipping Document.exe

Files

Shipping Document.r15.rar
.rar
Shipping Document.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 810KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ