FedEx Receipt[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FedEx Receipt.exe
Size

717KB
MD5

691ed4223b0a845fc048068552c788d7
SHA1

734df5ec875431573ce3d60adf8239c670db2105
SHA256

c5881aae0402696993a36546d2fa1e44d6fb53c0b8528ea23cbb1c12e0e7c9b1
SHA512

866beffb1a2175bee15580bc3cfe3652865a307cd35307c3dbbc11b860c731ca1183fec5cc6693c963dd7272e519659bfc5662eeab3fb5b3c51c47033b0dc68b
SSDEEP

12288:GLrKdJVZz5ddKjvQXiL01yTImFHAlMTb2WOrkXbHkVzrZ/uC:EgVZ9fsvQf16IcHAlMX2W3XLwsC

Score

1^/10

Malware Config

Signatures

Files

FedEx Receipt.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 711KB - Virtual size: 711KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ