Shipping Documents[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Shipping Documents.rar
Size

369KB
MD5

a2acffac7c025160781bfdd117fcaf1b
SHA1

213bc5cf9e42e33aba348a80c9fb9dae64fa0a77
SHA256

e0c03408172ea67884b93c60c988c8bc1b5e0096789419bfd881f455c06db35d
SHA512

c0739d95d7b16ed2b9708d3b71b706c24fdf49c63963d84e1f73006bd48282c9f9cf8a3f958c4edb638deccda171d772d5462f84b95c203f26c40cc4961523ae
SSDEEP

6144:eragDTERuqua1sW3yYgTmaT8Ny/F+LI9CpG5QLHPQWga3GLfYurYtHWPgifXvm2v:EapEqryxTm9k/FMIopeMgUXucBWPgif1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Shipping Documents.exe

Files

Shipping Documents.rar
.rar
Shipping Documents.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 614KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ