Shipping Documents[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Shipping Documents.exe
Size

21KB
MD5

f2f995cc3491dd91f1de0af1699d9fb7
SHA1

d6fb51cef0ba4680bf041c59ccf2f437155fd06d
SHA256

d2089c3239cc29b439bd2e52dd510a4b7215384bfe72794d890448eb8097fce1
SHA512

9b759b3a254f736b4f9c0b53d16e0664cd91ffa602cb3153abf8bcaed29528c2872e6bda1ddaaa54e8146e6b750c165e3ad4c5e0409e63118f7099a8eddeb508
SSDEEP

384:P7PgJV8CUNOcv/hhQdCreiXR9hkNkCcw9Uh+Er:P7PeuIeD9AkbEq

Score

N/A

Malware Config

Signatures

Files

Shipping Documents.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ