UPStrackingdetails[.]arj | Triage

Sharing

General

Target

UPStrackingdetails.arj
Size

547KB
MD5

f06dc9482c3a9e96587cd54f815c186d
SHA1

cfa50c835f5cca27d57394ec92eec1f42c2af7a7
SHA256

88c769b0619d975edf0db0023e38ed2c7865ed1e1ae1e998b975dfa8733315bc
SHA512

f99010ac1deb0747165c83f362c32b8f8c4dbe4fbbbd25d8be8537d5c4e843f08ec1895672670d55df3d173047e632f94bf940d1a11ce984d76e2c09845bd39c
SSDEEP

12288:mgYb7P6CRi6lL4DUdMwRpQKRFWxnM87Udd8AP8hcsmsLl:mgwGCom6wRuKRFKM87UJv2l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/UPS tracking details.exe

Files

UPStrackingdetails.arj
.rar
UPS tracking details.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 848KB - Virtual size: 848KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ