shippingdocuments[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

shippingdocuments.exe
Size

637KB
MD5

58ca64257e1a7bc9d940e11bec3dc2ec
SHA1

c58da47873ecaef52a2ba18b1d24270f69848e40
SHA256

efc554a7dc67b58cffec287d865b24fc8dc0fa8300114f0fd4e7879139991e0c
SHA512

44d95098a089078ae81207105b0468df862034d9f120b36593943c4d8430cabe57c4232b3f1915b43f61a313cb8568afb00a9465072a6c5fae88e92a56091917
SSDEEP

12288:b2zni4IyFN/1upLnUTNTRnEDbyhlkYG9XiVyXF/yT1Ynx:bwtJ1aUJdSyhlG9SVyXxsKnx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
shippingdocuments.exe

Files

shippingdocuments.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 634KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ