SHIPPING DOCUMENTS[.]PDF[.]arj | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SHIPPING DOCUMENTS.PDF.arj
Size

599KB
MD5

95904233bd7fad313585af6d5a1f9e81
SHA1

42f91c64588310c3dabad887114d419742156da1
SHA256

5072d915c53f5acd44d4c91980c3efa7754c8251f405f302967c897fe89328f9
SHA512

277952ada17ead945819a4951e02974a75f488b2b5e3511afdb43f9845ef4464f3752b24b252c336675451f16ada0403647837d6fc116434cad77a4e38121144
SSDEEP

12288:JUNKGA2i29s19Obt3f6aAjcZJ6Ntg6+s1W1mdQCIcrakA:6A2i29Es53fmjc6NK6+stQCT/A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SHIPPING DOCUMENTS.PDF.exe

Files

SHIPPING DOCUMENTS.PDF.arj
.rar
SHIPPING DOCUMENTS.PDF.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 628KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ