General

  • Target

    Shipping documents BL, CI & PL.pdf.exe

  • Size

    811KB

  • MD5

    a66520a932198c68fc0df0423e2c046b

  • SHA1

    d49acc9ad7e386a48d83d0bd334294b4168e21fb

  • SHA256

    40f9a446728e079ce7f1b7b8cd6a6f2ff82e4fb22d209ae9576f178612d35369

  • SHA512

    543ae2fa9923a599d55f0ec74f4eb2dd724209e83a5cb285fe19d40655ed8901c810013c6ba593cf55a7626cc120fdf5815a1eaa9e61ec071b2190f0b4f55f32

  • SSDEEP

    24576:qD0tM85tbNJjldeYiYHkOtw0BH2Hmpp68BMQaV6/778:qD0tM85DJjl/iW1tpBFpp6Ha78

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Shipping documents BL, CI & PL.pdf.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections