SHIPPING DOCUMENT[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SHIPPING DOCUMENT.rar
Size

881KB
MD5

ed723a89df77849a1e92af2c698fde3b
SHA1

955465c2b054a142f2d0825be171b007d8843284
SHA256

1488d6b8fd3f825d5a77f25705cbbba052726b6f35970aa6379f489acf462cf6
SHA512

a4bec258f0831d9975e9f0f91bfe8c2a29cb1e9b7032e77b4fe97e750a8ec3d4c7990ec0fa3b0774602bede0d9030c645328f5f11a34479bbbe9d265f8cadaab
SSDEEP

24576:LSpZ3lMY2OhC5VpbyRTFaIvxr2Z5tGY1l3Cfqb:LSp1leOubkpWfZ0U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SHIPPING DOCUMENT.exe

Files

SHIPPING DOCUMENT.rar
.rar
SHIPPING DOCUMENT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 934KB - Virtual size: 933KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ