Shipment Parts[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Shipment Parts.exe
Size

944KB
MD5

8e7656854358e10105f20b9992c0f17f
SHA1

4ab6fe4eb0cc7c5df786dba8b2b2464e4d2dcb57
SHA256

44e798b75739e6fdededf5b7ff28cae9f7affa32c47e2ee447e7a81ee6e7e266
SHA512

7ac80ea292dd6a5fe7a3c2a9f3522f1ce3791649a467cbab5ea50d40150e0a6b986442b7781651a7303c16cc2168088a4a51b30383236042534d46df0bd081e5
SSDEEP

12288:nziy2sz74MebM//NIiqczJOO2hmnpvLX0uOrqn44X:n+xsbIiqqOgnpTEuOry

Score

N/A

Malware Config

Signatures

Files

Shipment Parts.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 942KB - Virtual size: 941KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ