mail[.]eml | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mail.eml
Size

1022KB
MD5

18114148017ca4fabc0b9f13f8b11af7
SHA1

d68202bbc9d7712742c4a2aa5ea71d36a8fd5fb4
SHA256

acd168029a0817b6e16e324bc97aa3afcb970dab2b536f92bff37ac7861f9396
SHA512

10bb92b233088cdce8e773971f52732f04005ddddef42faf3308d59d3fe0aed9adecfc974e1b8b1dc6512dba0aa1e4be9f4b8de26602b388937ce5f7ea579b4d
SSDEEP

24576:U36twByJe/QDyb2lzCimC4m5xzswYLwIhlGxWxy/7QnIc3:t1XejVmxx7u3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Invoice Checklist.exe

Files

mail.eml
.eml
- http://www.alltimeshipping.net/
Invoice Checklist.7z
.7z
Invoice Checklist.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 780KB - Virtual size: 779KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-html-1.txt
.html