shipping documents for your r[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

shipping documents for your r.exe
Size

1.0MB
MD5

5d5e5ff1c1294fd48849160fd59cc762
SHA1

1760b672fa5f27113ea22486778131da69f57a5a
SHA256

065ca2568ff5b8dd327ef32472f962f10eddb43c642f3a0551a5071203d370aa
SHA512

4649832112ec6f6b8775b50b405513584612ef2e4dfc542a27644ac396bd87cd4be96eb2fda2160643593d0d1864b0a5430da8e7f39c2e39d77fe2eb9129b0d4
SSDEEP

24576:sbITsIBMNjnNNOhAe/S0c1d+dIUUTRLSg/qWH8+OlfZfugd0XN8L8mcwE47iK1:YJn+QWWH8pZ2gdYaJcA7v

Score

1^/10

Malware Config

Signatures

Files

shipping documents for your r.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ