11102023_1713_10102023_Shipping bill document[.]zip | Triage

Sharing

General

Target

11102023_1713_10102023_Shipping bill document.zip
Size

423KB
MD5

818339aad80be9aa34815e106ff353e0
SHA1

39c31fbef2b736cb00dd2606ebe09954fc5c88f1
SHA256

510bf93c760fb6b85d94cfa05ebe1dc6def17c7ea9a58cd1c607ebb83944e749
SHA512

3f4314d93745bbcaae3031db91dd1dccc633e74ed17006ab1dbd3adf052772ff3a53cba91859bcaa5f94b809293205ee96d955ea08a718563a670c6479673421
SSDEEP

12288:bEeIlN0yU0sE4vO2xH0ZFIt3dwfYEqoodvuCT:4ViE4bxUACfYjf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Shipping bill document.exe

Files

11102023_1713_10102023_Shipping bill document.zip
.zip

Password: infected
Shipping bill document.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 530KB - Virtual size: 530KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ