Shipping Documents PO88900[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Shipping Documents PO88900.zip
Size

267KB
MD5

cd67c7f6717c288091596578983b6239
SHA1

f6d99fa7f46ed6811161949746ef0299e2b3c263
SHA256

002a502092b22bd781f7f89f7016c2674e52a10625c9df7e7300977262356674
SHA512

8b56862d5681aa7416a30ed7854d998eb6a2e3b7d0cb3fa5d3ba9673fd618cbbc17068b8f875a72482d4b4430417826bf179dbf42455c0f60bfa96bd485c1d72
SSDEEP

6144:/fr83iHBSdGjCMaMO6S/13winkAqoGg3cZlbIxgdL9V80cSmMPA:/wyH5GMaMfSdPkAtGnl9dL9E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Shipping Documents PO88900/Shipping Documents PO88900.xlsx.exe

Files

Shipping Documents PO88900.zip
.zip
Shipping Documents PO88900/Shipping Documents PO88900.xlsx.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 367KB - Virtual size: 366KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ