FedExbilloflading 03112022invoice[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FedExbilloflading 03112022invoice.exe
Size

747KB
MD5

60c9326b932f124d9dcb31d698eff7e2
SHA1

dc29523dfc56cd3c1f393c4282f71a345199c55e
SHA256

4433ffedfdc28e51850d2dd2673e44503a8705f2d31a7ac47a284111ddf33f01
SHA512

bfb74af104aedd4c1054f8b71219600343a8ff2fb811b0437fe9230442a349b2695abd1b1f8f7651ad21820f1884b6be1afa8138ff1e2eecf29e5a39d7681ae0
SSDEEP

12288:Ky6DVfs2sFLTAehm8buS89WOUNDixiCTpUlkOGfQZgIsYDPRwcNq:C8TAqbDh4x/TpSBGfQZLD2

Score

N/A

Malware Config

Signatures

Files

FedExbilloflading 03112022invoice.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 745KB - Virtual size: 745KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ