SHIPPING[.]r15[.]rar

General

Target
SHIPPING.r15.rar
Size 421KB
Sample230712-gsl55aca97
SHA256 488496142d7afbf203bd74e2a73786945f57845149c8a57ed9c158e465d879fd
MD5 88c9037d3e0672e4d20c5ce9d3c12c9f
SHA1 32dc28891c2493943182ec591034bde599d6c89f
SHA512 05c27ebaa9172dd671f0196522b358aa30c3885bab6b5f5df859111322d5c1a11113d86d61ea31f1e3f58fd7b2ed75be075ccda999c09a12925adeebc6de58c1
SSDEEP 12288:Tkyl2kDbuKQzPxw7IY5mV5WZWnt3Q612aXQenbVU:xpbuKGK7Hm6ZocaXpe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SHIPPING.exe

File Explorer

SHIPPING.r15.rar

.rar 421KB
SHIPPING.exe

.exe 787KB

SHIPPING.r15.rar

SHA256 488496142d7afbf203bd74e2a73786945f57845149c8a57ed9c158e465d879fd
MD5 88c9037d3e0672e4d20c5ce9d3c12c9f
SHA1 32dc28891c2493943182ec591034bde599d6c89f
SHA512 05c27ebaa9172dd671f0196522b358aa30c3885bab6b5f5df859111322d5c1a11113d86d61ea31f1e3f58fd7b2ed75be075ccda999c09a12925adeebc6de58c1
SSDEEP 12288:Tkyl2kDbuKQzPxw7IY5mV5WZWnt3Q612aXQenbVU:xpbuKGK7Hm6ZocaXpe
MD5 SHA1 SHA512 SSDEEP

SHIPPING.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 1e6d877e28638122cf889cb074d451010ab7aaaab155348d1719c7467e697dac
MD5 cf30256720f7dd6a029e5d6dcf59a85d
SHA1 b89f84ce8791f1edafb53a77d71ac91fc2469e18
SHA512 ce9581a11fcc0f17ef5d448db8bd306747b8079386d60c4e3b22b15e2ee07429e0bd2721521c40b3225dfac3fdad4a265d024e8529fdb7d189753316bce8e83b
SSDEEP 12288:byXNhGRXUnmW7xuXp+ILBd4IcRyXWOlATKyPoMe:vbRN9lAVPoM
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

811050

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing