SHIPPING DOCS_PDF[.]rar | Triage

Resubmissions

14/07/2024, 02:52

240714-dcxedatfpp 5

13/07/2024, 16:34

240713-t23kpa1ajg 5

Sharing

Copy URL Twitter E-mail

General

Target

SHIPPING DOCS_PDF.rar
Size

761KB
MD5

aa9860071adc597059e0de6c3720048a
SHA1

261178d97c83e0a3e632ac79f44e6606e64629d1
SHA256

df0ca83afbf0b753be9437e8a5e4d74cbbc2a34a6dedca8f997366369a958549
SHA512

4b25610595bfb8e5ad446fa7a27b8b4698a9ef1d1dbb3c286452769d2ce9496a0ba66e0c4930edd4e6529a14d9a2cf32cac7cb1dd7b3960759932d2a15d6a3d8
SSDEEP

12288:MwFgrEyDtESOBMuvnPq5SYfmwv+TN3KSK6dbxbpTdzQRuB0Oc+jjFzkoryLWXZli:Mw6wCyAEPqlYBndbfdzQKvjjFzCLs31Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HSOwUsZ7hs6Pm4m.exe

Files

SHIPPING DOCS_PDF.rar
.rar
HSOwUsZ7hs6Pm4m.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 769KB - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ