SHIPPING DOCUMENTS_1[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SHIPPING DOCUMENTS_1.zip
Size

801KB
MD5

8310dffa55206b4fc31889490ba9adc5
SHA1

fcafd9cc4036fb167ce74e2ad45ee78317595520
SHA256

806249d239c02dc5a14bf416deee3b5b50fd834a9d5db7fc1aec19ab00b3d4e7
SHA512

049530e730d63d86fae6f3ba54377bc04a18884cb957b7a183f08eab07bea1a193cad675b826038b4f023c1e5e1c40001a115cfab87ce8748e7f1b5173f40164
SSDEEP

12288:R0mI2imR1a2CiZfb6bx5qywVFelUGDbgbMFCc8HTO4ilWB3Cq6wKePA7HurQRn0+:Rw1+14kD6W4U3MFizORXqUePEOW3z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SHIPPING DOCUMENTS.exe

Files

SHIPPING DOCUMENTS_1.zip
.zip
SHIPPING DOCUMENTS.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

UVid.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 943KB - Virtual size: 943KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ