27489d1152bf69de6520f54180bb54c53fb367e7[.]rar[.]tar[.]gz

General

Target

27489d1152bf69de6520f54180bb54c53fb367e7.rar.tar.gz
Size

652KB
MD5

d350be1d704574dbeb48ebd3879867e0
SHA1

18a9008f31cba315c95e457e797d71e3551132a6
SHA256

d7e1a9824c87bb03b657ed5f6f91c468d69792b588a72dd23fd938e131e07e1b
SHA512

9278b175458d5be5b4c0eb70075b5487f74fce4c5b551206988307f2369d012f0441fa7b4a363a5cb06af1a1c78a8e91f4a8ba39c4e5f4d3ccca2db2f63c4215
SSDEEP

12288:ZfxVqVcEVnncyfiB+vpSGCkpJ71SA18PXjn4U8YX7ZXxbA4+uRbpN:ZJVq2ExfA+vpHdczb/HFXxbP/FN

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/SHIPPING DOCUMENTS.exe

27489d1152bf69de6520f54180bb54c53fb367e7.rar.tar.gz
.zip

Password: infected_te_report
27489d1152bf69de6520f54180bb54c53fb367e7.rar
.rar

Password: infected_te_report
SHIPPING DOCUMENTS.exe
.exe windows:4 windows x86 arch:x86

Password: infected_te_report

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 664KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ