SHIPPING DOC98746578[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SHIPPING DOC98746578.exe
Size

798KB
MD5

cca2bef85ce9ccb9c6aa8d7c291d07fe
SHA1

dd68a8b20566c08737332f6d6a9fdfed4f82f51e
SHA256

c0d5fa5acc4fb14f165188e7878072f63dc43b6b1c67923a8f608f0f8010cb7b
SHA512

50cfeadd000b0dd5440a251d30a6ffbd70007c049ce5067130cfdf4fdc6e5fabdf9b376a6f342b5d517765ad1cf94dcbaf0b76b62083dc59eed4e82ea3a9416c
SSDEEP

12288:YdIiU251kC2iN7pqb2RZwyWkJccDE9MEsIkYNJxo2B48CYUPyKvCZdixkdP:2WoB1zZwy3mM3zYNE2yHYUn1KdP

Score

N/A

Malware Config

Signatures

Files

SHIPPING DOC98746578.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 796KB - Virtual size: 795KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ