215141509213c2e15682c3c1e0087f97e64784fe286eb0dabd3a8bd189f7e741_JC[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

215141509213c2e15682c3c1e0087f97e64784fe286eb0dabd3a8bd189f7e741_JC.7z
Size

702KB
MD5

dc2bd45f1403a0dbe62b39295c53afa1
SHA1

799d80881176593df03e9ef105e7302f8ce9ce59
SHA256

215141509213c2e15682c3c1e0087f97e64784fe286eb0dabd3a8bd189f7e741
SHA512

10dc7d8c257c417e280be478c2ef1eabd9e10d9d84e5e713f19bb66b01e326151adb2aee7bed48b56aa35ceddfdbe5ba289e7465004cf7d53ef1b1cf247431ba
SSDEEP

12288:x8MlnCLf3gK+f5B1cf00veLc9BC8tQmbiGXk6yNa4vMOF/3vAHfzFu2GSNefoXFo:SQCTbdfIEC8aWXkh8OtvcfzFDf/XU5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CI 23JS0502-POWERSHADES(ShippingCost).pdf.exe

Files

215141509213c2e15682c3c1e0087f97e64784fe286eb0dabd3a8bd189f7e741_JC.7z
.7z
CI 23JS0502-POWERSHADES(ShippingCost).pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ