BL Shipping Documents LONSUB6519956V[.]pdf[.]z

General

Target
BL Shipping Documents LONSUB6519956V.pdf.z
Size 594KB
Sample260930-q7gnmatbla
SHA256 f62afdf16ed689e886945408668134bafb5585e0a6b3cb97fa88acf3afbd01d2
MD5 374c93ac2cfec06046246b14335d7f74
SHA1 30569db475831aef5dbf9a8a6eafe0df31596f6f
SHA512 adb28c3bd45e4704b4542f569586fe18f26011c1c0822258b46c52e781db9d75e8dbcbb28b683258f7c890064d4669d8850b35dcad83f2e8b0fe923c52e2b893
SSDEEP 12288:sUkIXUFNPWjtuN91E86/9KVL+QUnDmg7FF300/vfL3y:jkIQNPWgDE7M1n0D7F6SXjy
TLSH
T1B7D423ADE30CAA3C80E5A11365E35975C8D381B37AED6A3E0A60A5CD0F79495877CCDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BLShippingDocumentsLONSUB6519956V.pdf.exe

File Explorer

BL Shipping Documents LONSUB6519956V.pdf.z

.rar 594KB
BLShippingDocumentsLONSUB6519956V.pdf.exe

.exe 836KB

BL Shipping Documents LONSUB6519956V.pdf.z

SHA256 f62afdf16ed689e886945408668134bafb5585e0a6b3cb97fa88acf3afbd01d2
MD5 374c93ac2cfec06046246b14335d7f74
SHA1 30569db475831aef5dbf9a8a6eafe0df31596f6f
SHA512 adb28c3bd45e4704b4542f569586fe18f26011c1c0822258b46c52e781db9d75e8dbcbb28b683258f7c890064d4669d8850b35dcad83f2e8b0fe923c52e2b893
SSDEEP 12288:sUkIXUFNPWjtuN91E86/9KVL+QUnDmg7FF300/vfL3y:jkIQNPWgDE7M1n0D7F6SXjy
TLSH
T1B7D423ADE30CAA3C80E5A11365E35975C8D381B37AED6A3E0A60A5CD0F79495877CCDC
MD5 SHA1 SHA512 SSDEEP TLSH

BLShippingDocumentsLONSUB6519956V.pdf.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 18895e1e9a247660004106f26be55d510218b84f2423019c5a9e1662d20a8d6a
MD5 fd425d2f6b34d45ee4ad2bc1baf3f2c7
SHA1 45ecec32238479965e693faf4715e1f909162944
SHA512 5cd699a9fdd5276acb834f16bed5088151e7ff13a89704b57a123cd84c83d0bb683368dba199ade9c61a7340178e46bd5324a2506f04b1ec76dfd00e3f567564
SSDEEP 12288:3hVpdocAHOPma5ek0hmAaxWwmDi6CDenwFrV7HlWD21W2PJhOB:35daHOPma5ekbAQmieap7H62BgB
TLSH
T11105E15872A48E02D03D57B985B1E37023B46D4B9517E70ADED8FCEF3E217E15A0A683
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

835302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

BL Shipping Documents LONSUB6519956V.pdf.z

BLShippingDocumentsLONSUB6519956V.pdf.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

BL Shipping Documents LONSUB6519956V.pdf.z

BLShippingDocumentsLONSUB6519956V.pdf.exe

mscoree

dotnet