Delivery Note Ningbo[.]pdf[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Delivery Note Ningbo.pdf.7z
Size

490KB
MD5

8f7fb65314ec1cc8e4e3ee82fb02951e
SHA1

b871cec8891c9fbb4649517bdb56edb662ff22c8
SHA256

309ca3f36a9ced96d07ae6c8a96158daa121072da6bb49cd0f08e93d0ee7abea
SHA512

7c81cfe98146fc6202ddea0a0dbf70f47e7759f7ff0ef1712885db6d87a4d3eeedef7e3ad47bd98b0246086793cdb23ced4ef02a3cf5af9c6125bbcc63b2c2ab
SSDEEP

12288:A3c2YU1o14ckF+u2eY7s/QWqO9VAVNen4f0MDny:icyo1SF+u2L7s/QWqO9Vafxy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Delivery Note Ningbo.pdf.exe

Files

Delivery Note Ningbo.pdf.7z
.7z
Delivery Note Ningbo.pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 819KB - Virtual size: 818KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ