shippment[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

shippment.7z
Size

639KB
MD5

12a34b1974bbdefc15b393452bf6dbcf
SHA1

f28b9999b391ced573550ffe62fa7a77fa0aa7ca
SHA256

fd47d570ec9294b1440fc9db0cb427329b9c7d0d3dad75f0097b28cbb10089e0
SHA512

7a40402c686c4ff5f513fd1f518fab37c3e9527ab1a3818ba897dc7cd99df8f07fd788491967a6cb425750efab7b16a5de78a9fa08da0480f2c2c3a3c4ec52a7
SSDEEP

12288:FJkbMyaWGBGWKiseag8eyBL6r8+UPlH1tqtWdz3asuxloVPRtGSzdYj8VEYsyy:sYTP1UeyayPlVAMasGoz8IKjwEYsyy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/shippment.exe

Files

shippment.7z
.7z
shippment.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 634KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ