Shipping Docs[.]pdf[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Shipping Docs.pdf.7z
Size

583KB
MD5

4d46f87cd6602786740ec2d6e1bca42a
SHA1

88a5d1f2a06139c443368cb83d6ceecd76343fd2
SHA256

3c7cd5fb324e3520df14b9918e9575b7e51c7884cfd683c9252fd9cbf5077eac
SHA512

0425a3586ee13e0392a2e2dda59882ba44f3a46cbf6f85add6e5330dd6196149657d52783288572748062202043f309cd67e5de0c7e4773f5fa68d0802f90f3f
SSDEEP

12288:z+Vj23sZ0niw/KoDX0Z4JlKjpdF/84uEwSPiyg+0YBu7suDY8yCT4my:ejWsZ0nJhDEZ4JwjpgpVyz0YCsuDo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Shipping Docs.pdf.exe

Files

Shipping Docs.pdf.7z
.7z
Shipping Docs.pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 219KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ