BL-SHIPPING INVOICE[.]zip | Triage

Sharing

General

Target

BL-SHIPPING INVOICE.zip
Size

644KB
MD5

c09583ed565e11d8dc5b4213d5abe123
SHA1

66f05efc868504cc14fd248e3f6ee603d9168a09
SHA256

de545c992f9dddfe1bcb12db1535c2d3a0234606aa624f31c057274b97cd6e55
SHA512

be985c26c1f9ce6a8aa71373b6277b599a695638c7668522aa902e47f59cda937ce862149a85927aed4a461519e1b9453fcb577ce2e61a53f0381e0c66cb6831
SSDEEP

12288:4ZV4b3XAD/6TsXybH3C8bPEMWweJq5SbJG8y8DHq29mmUyWSD9EsxZw6OSQl8uof:4ZKb3wmwXyb7bdeJPJnfDK2Qdy7ECw6l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BL-SHIPPING INVOICE.exe

Files

BL-SHIPPING INVOICE.zip
.zip
BL-SHIPPING INVOICE.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 700KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ