Airwaybill and Shipping Document[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Airwaybill and Shipping Document.exe
Size

1.0MB
MD5

02d9e3efb5605b8558bc4ff6cc7efcb4
SHA1

714b3831540fce00dda4184d644d58f1bd7aadb5
SHA256

53a33d8f2446780ac5b73e8e09c417b2a87444e89c03c70be72a67bad2e13a00
SHA512

5bdcb06799cde4c8ff3c46e3099ee41eb2d2aeabfe422a3dc3c849ac2167783c81aef9d5586806b0e22df94eb78719bc22ec5fa1676cf767a84659c0036d7d14
SSDEEP

24576:zXJSaWIt3SqAJz9WhIWs+3hnOpfqe6lbz0:QaWIRSlJBW6Wd3hnGfqvb

Score

N/A

Malware Config

Signatures

Files

Airwaybill and Shipping Document.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 954KB - Virtual size: 953KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ