TNT Shipping Document[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TNT Shipping Document.exe
Size

1006KB
MD5

f267f51b1e50561a133804addde4dd64
SHA1

d38f98b83b9565761a10f40263394fc4287c527d
SHA256

2e5243c0f25a508026aa4bc82e7cdddd2df91f556c8509ac6e2b60d3ef17b517
SHA512

e63081585c57f384552caae3e16508ab416f0736cfa272e1b67954e46d4fec01d433ccbaa653e7adf939fb7b1f00c261c0b0915c486919bae34bab64b242ce37
SSDEEP

24576:hxhqHrY2103j5gtj+5I0uKpF/qvpW4dBa/9CpTVoxpHOimX:hxhqHrd103j5gtqjpqvpWYA9CpTVon

Score

1^/10

Malware Config

Signatures

Files

TNT Shipping Document.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1000KB - Virtual size: 999KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ