Shipping Doc[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Shipping Doc.exe
Size

29KB
MD5

e2a9be05d77db9ac00c87a4cce5fe543
SHA1

42c0dd1cab3c2754880340a478219e7c9ed72e6b
SHA256

8961f55689e3daa32c0b9cec52e96452788d31109bfa8fca44f7071cbf55e935
SHA512

1c5a3efdab892203d2dd584fb2966f994067e037307f7fd1fa3a6008c6b9a7f151d485349bf1388f95682510418417f363492f9ece257cd6197f2f98570bf1ac
SSDEEP

768:wfCUhXwRCYhkE+xaPrVSMcCDf3KIC7WY:Y5XYv+xsx739C75

Score

1^/10

Malware Config

Signatures

Files

Shipping Doc.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ