bc5e5b93289e45bf1243e5f82536a865f31e05ddc7e8a096184d358d327a4076 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc5e5b93289e45bf1243e5f82536a865f31e05ddc7e8a096184d358d327a4076
Size

2.3MB
MD5

f11906ced7e98574d55a0609fba33539
SHA1

74763daf71faabef5b9b780e12b626c7ef814f6d
SHA256

bc5e5b93289e45bf1243e5f82536a865f31e05ddc7e8a096184d358d327a4076
SHA512

2ae1ef1c1e59302f638d86044eda7133dd65c2b87edfa5f5b098d97c3fa8e924637c96544f62952564ceab664a9c51c68e3ef0d1f46b390c929aa91c495274b0
SSDEEP

49152:+jmawckcm/zbgJ+VAHkF7QLr1oYj2KYwFU0HLolRc5mWnAXiFTn3WwjC4TRG:+jt5/LJDLr/yKpFRLM+mWnzrGl4NG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SHIPPING-DOCS.exe

Files

bc5e5b93289e45bf1243e5f82536a865f31e05ddc7e8a096184d358d327a4076
.rar
SHIPPING-DOCS.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 389KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ