Shipping documents 0007784885995[.]gz | Triage

Sharing

General

Target

Shipping documents 0007784885995.gz
Size

638KB
MD5

ce798e56f267553d02eb7a4a0cdd7262
SHA1

b53c5ac58e76c69296e82c4970b39f47ee550f8f
SHA256

c1bf515158c38c7270f70acb58f39288b58bead598b056710b82d744c5d29e62
SHA512

5553c9ddfb4a95862199d03a5d5f3b7d51ab3c059d2662a978784d6881b96165ed52e710e8e8e4f64a6e55a7077767dffc32c059813101f3f9f16469a07a5ec7
SSDEEP

12288:ao5IE9zohoxTlwyWi7UQA3F9pmRjQNiRlRg4cIDhG9hY61:nV8oxOni7UQA3DsDnRVhgY61

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Shipping documents 0007784885995.bat

Files

Shipping documents 0007784885995.gz
.gz
Shipping documents 0007784885995.bat
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ