SHIPPING[.]r15[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SHIPPING.r15.rar
Size

421KB
MD5

88c9037d3e0672e4d20c5ce9d3c12c9f
SHA1

32dc28891c2493943182ec591034bde599d6c89f
SHA256

488496142d7afbf203bd74e2a73786945f57845149c8a57ed9c158e465d879fd
SHA512

05c27ebaa9172dd671f0196522b358aa30c3885bab6b5f5df859111322d5c1a11113d86d61ea31f1e3f58fd7b2ed75be075ccda999c09a12925adeebc6de58c1
SSDEEP

12288:Tkyl2kDbuKQzPxw7IY5mV5WZWnt3Q612aXQenbVU:xpbuKGK7Hm6ZocaXpe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SHIPPING.exe

Files

SHIPPING.r15.rar
.rar
SHIPPING.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 784KB - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ