General

  • Target

    02102024_0102_01102024_Shipping documents BL, CI & PL.pdf.rar

  • Size

    751KB

  • MD5

    380796d512f67990a943b577d6c23419

  • SHA1

    64481bccd48226fcc634cf391c3be03c0c53639e

  • SHA256

    5b4afa4cfcce54475328d7f8b52bbedf094e14be9d9b06f5a1822e70a5aa2a6d

  • SHA512

    9189a3d63bc366e8db82cca610b0ea27d1f8d82eb56f812072d72ddf356269ba3c826c732d06a49437cf3ea53363798e89a71f3f407e8d71a8c4cada00bc2890

  • SSDEEP

    12288:gyC6wuynDD3Npmb1FxtqGwoJKdaYwEx1qV+fpppXOuGZVa41hTM7aNiWjL933Ge1:gyCXgrNnJKNqV+fprv41aeL93xQZg

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 02102024_0102_01102024_Shipping documents BL, CI & PL.pdf.rar
    .rar

    Password: infected

  • Shipping documents BL, CI & PL.pdf.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections