SHIPPING DOCUMENTS[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SHIPPING DOCUMENTS.rar
Size

677KB
MD5

d3f09ad2428f23e15238e368f6819cd5
SHA1

421b54979a1fbf59235ead9b039a96090637531c
SHA256

2485cda8e935717c8c466f398547366a7fccc7190187e1054594d471a38637f5
SHA512

d1eaf077933edfee1a0ba513f3fa27002d46f301cda7d832130f33c1838424bc225bea0efb55debb6a01bf40aeaf9dcd484e91d683c48ec4b531beb5d1ffd1be
SSDEEP

12288:eiLodYpOQhY8QfyDT4vY5ftA6GE86D9IaZiWohFYY59cH4NtXgYBa847c:eiMd4OWQfyDT4vmFIYa55dZ/Sc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SHIPPING DOCUMENTS.exe

Files

SHIPPING DOCUMENTS.rar
.rar
SHIPPING DOCUMENTS.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 747KB - Virtual size: 747KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ