TNT express consignment[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TNT express consignment.exe
Size

866KB
MD5

fb3f5a41f8042bd8888d8509c2967506
SHA1

e8725a3629959ad04456ea2d635a64bfbeee8734
SHA256

05dcfac77e1a7944cb222f6b3fa9d272ac8f59bcd6feea45061cc61590dd0e49
SHA512

9f3d683acf37627eeca6dd6d9c91c787289bc3ba6ea6c248c1eeea95bcc0ff440523cfbc295b1cc4edf5cfbb9eb105b659ebc4a06b92607daed6a24b3d96d601
SSDEEP

24576:rwteDPZowIb2SxX1fYS5Pk9INPyVu91aY7A:ieDPZTIb2ggShKnI1LE

Score

1^/10

Malware Config

Signatures

Files

TNT express consignment.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 857KB - Virtual size: 856KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ