FedEx Shipment doc[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FedEx Shipment doc.exe
Size

866KB
MD5

25309ce665df937b38c8364e26c86393
SHA1

dc469d909d0c10d0fcd3c4542028ae4c6348f32a
SHA256

db84ef8e09c1afda9e5d9dd400a56bb61c01eb131fef555059251e4234bb894c
SHA512

6590259b8e2065eab0d991753503969b5014d9a9ce61f0d97c3b778d07a99d34b29c1670853de2adf3e479c9a179005b3f2bd2ec9d505d260a632170c37085f6
SSDEEP

12288:0vSrIZKq2iNCOUFJpVLfnQBZRnqYBIMaaOHRNyJ1Pw1Zv/eOnADqjJ5nXG:0qU1fijQ9nq8IMUHRNy3PwTH/jrX

Score

N/A

Malware Config

Signatures

Files

FedEx Shipment doc.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 854KB - Virtual size: 853KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ