STATEMENT CMA CGM Bill_1004053123[.]rar | Triage

Sharing

General

Target

STATEMENT CMA CGM Bill_1004053123.rar
Size

697KB
MD5

a9a08e0bf02fbe4bf814e6fb3fba2fe2
SHA1

3241689d7bc5fa1880afcc46a9b57d20fb1edfcd
SHA256

e7c0d35af364879dc0b4772457390316435080a667b0189d7d5a6d06f7439414
SHA512

144c068b85f9e7d7b73d041eabc088e4b7e4e2fda0ee5bcaab82f57b8debb24b54974897349c71293a598beff2ee32eb7e5e06a4abf1ffeba42ae8d990106159
SSDEEP

12288:jLFe3X8t95YQnpPQwrrvA6bn/6c5Asy/LBSSUH4+O1Lzy2T08UMA:fWXGjCQ97BE/LBUY+O1S2oIA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/STATEMENT CMA CGM Bill_1004053123.scr

Files

STATEMENT CMA CGM Bill_1004053123.rar
.rar
STATEMENT CMA CGM Bill_1004053123.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wrL.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 782KB - Virtual size: 781KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ