17102024_1354_16102024_shipment doc[.]rar | Triage

Sharing

General

Target

17102024_1354_16102024_shipment doc.rar
Size

614KB
MD5

9fbf84c4077c65e7a955821f4ea8891f
SHA1

d62a475a055b0558dd8b461274b786cbc6fc7a66
SHA256

3143d6dc91bd82fb792a14bf09ff9b5820c139acad99c1ddc6c7c2e2b781a39c
SHA512

e837ff81ef3cf998e9008db02c0569d4c00c20134d53ddea79a265e66a3d0afbd09bc7442a0b391fd2fe75deb4e06de3c2536700d1c50e49794bf312802f3b46
SSDEEP

12288:o0OYDSjiaKXQ4o+xserPtEPkhaRY1vyxFBHdgxviHQrZltqb/fU7R:oJ4iBlkjtEPkYRoOrcwyY/fU7R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/shipment doc.bat

Files

17102024_1354_16102024_shipment doc.rar
.rar

Password: infected
shipment doc.bat
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 686KB - Virtual size: 685KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ