Original Shipping Documents_pdf[.]gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Original Shipping Documents_pdf.gz
Size

554KB
MD5

b7556875e61c6787703bf0fa68d14837
SHA1

0d2dcdbc428a642b8b3de51675c11084d55941b5
SHA256

c070a71779cf7a0afe72bc9745f4eb3659b37066c4d7736a01ea73ab2493da24
SHA512

c6b5a8bddd94adb82b5490d62d64519c35a3ffff47f2a8d808fbbfa2336db80b8d5d32eef22ee1893935ed2440f28bffafa4d8b6f5c5b92f9188c709df4e9291
SSDEEP

12288:U0L2THsjqGZ30qty9+LGNm7fnb/DF4gdQ1ziFrpaGh+UIE92c:vGykqtywGNmTnDvQAza+52c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Original Shipping Documents_pdf.exe

Files

Original Shipping Documents_pdf.gz
.gz
Original Shipping Documents_pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 696KB - Virtual size: 696KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ