shipping_documents[.]exe | Triage

Sharing

General

Target

shipping_documents.exe
Size

741KB
MD5

b5e1971ffcf31acb0ec7517c850fa567
SHA1

959cd8b10b4e1a7634acfb419392e8190c127681
SHA256

8ed1e9a81687deafb7b5d4f19ea6a1f32744d93fdc28fc2fd2dc80f478ee8ad6
SHA512

566b86191e1789a5590a4137ab6fff03c2a9f1baada9969b6586efe9a66a77f4d697436cecc5e34464b58ca5ac6b68ab5232de30c97033e069f73a1b09e7d50c
SSDEEP

12288:gRni4IymG3Wr7J98edmJkFSeFkfV3aPBFDZNWDUYYq:gRhM7J98+mJTz3Uwr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
shipping_documents.exe

Files

shipping_documents.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 738KB - Virtual size: 738KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ