12102023_1159_10102023_BL Draft & Shipping Documents[.]pdf[.]tar

General

Target

12102023_1159_10102023_BL Draft & Shipping Documents.pdf.tar
Size

626KB
MD5

7fb7ae3e8dc4ad2abe4f2e6a8be7da75
SHA1

6cbb05902ebd45aad5efd142224cc3e8f6180e52
SHA256

80eb5668cc04e92ed2e3811958f9a4c9d826d1bdb9bb1a0cac79ebd81a3a1c2a
SHA512

79849459dce342fde8ee0488072823a143163f76725688300558091a823ef8d71b7ee731c82f9433e7d362555ffd7fe0d1ce76181cd792d15d5a1bdcb50cf5c0
SSDEEP

12288:AgfLkU1V83gkqOqhjzDJLyxpCl08Z50RK1UCMZIGF2Q6ROuDZZ:zLIjq5zDJW2dn0R2UCmd6RZZ

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BL Draft & Shipping Documents.exe

12102023_1159_10102023_BL Draft & Shipping Documents.pdf.tar
.rar

Password: infected
BL Draft & Shipping Documents.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 698KB - Virtual size: 697KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ