shippingdocuments[.]exe[.]bin | Triage

Sharing

General

Target

shippingdocuments.exe.bin
Size

463KB
MD5

1572bb732795b09ce8469e615ffb010d
SHA1

ccfa832de9028ab78dd2d9554e8b8d95b275bc9c
SHA256

858d78e45567e3b39affd12795d7b16fbc9af5d725ee7a0dffc10a86ca22133d
SHA512

581e68da17ed09656d5e522e5ff7f8507885eff7975c4a6177df21d9e27162704dd02e55beb62f056fd6cfaa0229996ed99e4aee99cb72bbaf3c0c42c324825b
SSDEEP

12288:l7cfm2Ib++4UWomGiUjcI0tlgx21XfR8d6:lQObH4rdNI0K2hfS6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
shippingdocuments.exe.bin

Files

shippingdocuments.exe.bin
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 458KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ