Shipping documents[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Shipping documents.exe
Size

888KB
MD5

9c2c65e6334b976dc8afbf375da5c5a8
SHA1

708be8016b86884a52b07879b04a24fea16b4db0
SHA256

9ae533dd395882eef0df206750f1fff09e5eab9a4397515632d15fd248f72ca4
SHA512

68f33f32e195518b4829b506008a02673b4eb345e39f79d91244b1644e6a838bf8f4031166392b5475a40e4a2253677f3fbc210216cb9a1d9d6d111a69c45ad5
SSDEEP

12288:JdOJtO2iNP0W9UYb1a9mI2V9btVOWXqhS7/5bFqiWW6e79FS8X4KfXlbMyS:zO7O1x0iU2E8lXdwKF4u88Xpf1bMh

Score

N/A

Malware Config

Signatures

Files

Shipping documents.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 725KB - Virtual size: 725KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ