INVOICE SHIPPING DOCS[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

INVOICE SHIPPING DOCS.zip
Size

601KB
MD5

d123dcf563a08db2d18a8886b3f4224c
SHA1

b3e5bc352a21d490105af8deed35d10cdab403f3
SHA256

879ea967de824786279f69b73a662300f8a096e8bdb3fe61c4bec137d4bebce7
SHA512

1cc155559f86e65ebea3ea76e3162364d6928b2aa34ee4e5e64aa95fe31fc4ff0127b4f34efb4a18b79ee8a92c8efb99c4f7ab3b8b9b1d1c4c8c0b5fcebfc98d
SSDEEP

12288:z4NzeJI1AuhmepHSnwDp6BiuSQiGzgq7yogB+/XI9v9vd6FG/lQHNvhXLhz/:z5IhmeRSn0kYzyysvIv9vgus7J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/INVOICE SHIPPING DOCS.exe

Files

INVOICE SHIPPING DOCS.zip
.zip
INVOICE SHIPPING DOCS.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 665KB - Virtual size: 665KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ