Overview

overview

10

Static

static

7

HAWB No Or...at.exe

windows7-x64

10

HAWB No Or...at.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13092024_0412_12092024_HAWB No Original 2 - (for Consignee) - HAWB No_ D889163[2].pdf.bat.bz2

  • Size

    584KB

  • MD5

    7093258960a3163ca9d784d4de9dbae7

  • SHA1

    b939198c51675c7a99c1ce641a62feeda3f27bdc

  • SHA256

    367dfffe5b481ea41845028453d6c1dbe7ffa9b214c509946a7ffccbd80cf622

  • SHA512

    bff604f730fb8bb67c60da4241d4c8e557c88326473c09cc604c24fc1ec2826f2e65800c80b977b63b6719bc0b095bbf14808d06693e74a9cc81ed1551fdeb79

  • SSDEEP

    12288:z8Z4bJ31v9oibrEjtXXqx3TQ85NASFE9WHHGtSIGrAJ/s+O2D3kzn:z7bR1uwEhHqxTQ8RFG2ksyg

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 13092024_0412_12092024_HAWB No Original 2 - (for Consignee) - HAWB No_ D889163[2].pdf.bat.bz2
    .rar

    Password: infected

  • HAWB No Original 2 - (for Consignee) - HAWB No_ D889163[2].pdf.bat.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections