ShipmentDoc_8368208763[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ShipmentDoc_8368208763.exe
Size

442KB
MD5

cd984264c6b0b5a9d9d3a9f5208d7f3f
SHA1

5ea629544612f25b5545fccc47f02885199e23bf
SHA256

a2e80ecd11cb45dff48226f62e42c48405066c00f94b6ffa49a5f45dc62a8327
SHA512

e05bfe7e987f072b95ff21b2ef73343d01d8f8493b727cf351236f78a82c90ad3d19f53548499cc056503d57a4654df90ea43f235c709f312f0cb7f41a14bb84
SSDEEP

12288:XTmgp57gEMX668YM2KGgQ+D1apMcov6nnjqKoe:XfKCzJ6nnjqKoe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ShipmentDoc_8368208763.exe

Files

ShipmentDoc_8368208763.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ