FedEx Express _771706182561[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FedEx Express _771706182561.exe
Size

442KB
MD5

e2589e81e13ff990793d27d610ba48ce
SHA1

443e4b9fac3d7307c7812c28b87af3e752c5523f
SHA256

453b2c84056cde325f4e314ecb272996714901ced897e8605658d25f1036aee6
SHA512

31f69795918643f292dd12f2dd4a3dea10cfd9916c7db85b8c01d878cc7295424f1d62becd14b0b673c34690f9cb09d61571db753314dcf1b67e7aa152abc563
SSDEEP

12288:dsMKIgZiiIeNd+mMhJFtBILciwoO9X4QOeAjz9GF:qIgAO+LnBILcQO9/OeOG

Score

1^/10

Malware Config

Signatures

Files

FedEx Express _771706182561.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 438KB - Virtual size: 438KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ