30042024_0657_29042024_customs declaration form[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30042024_0657_29042024_customs declaration form.7z
Size

365KB
MD5

c45d887f2fa5d0798410177256a45987
SHA1

6606ad0a71df839e8c1e538d3177e48e4a4627fc
SHA256

f0de43db7390b45e814756b37c66ad4bc150a3fa6dea92ef0f922e15d45ff792
SHA512

06e1f2c32186fb7d2313f9f8efbd785a0646b95121f5f0ee307aba0b171e56ef48f2ddee7cc3ab0278609f2caa60d034f96d50e4c8e42f51246f47c313dedd31
SSDEEP

6144:jtvShEsCDC+7mcmMHaE5/OV45RYIZHtMEvrYXPmBCAgh16ZQ20NPIXnoUmWJXSYu:jFTduBcdPdzyeBCz6ZqzVWyx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/customs declaration form.cmd

Files

30042024_0657_29042024_customs declaration form.7z
.7z

Password: infected
customs declaration form.cmd
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ