Shipping doc[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Shipping doc.exe
Size

675KB
MD5

9c040616832e13c93a68d73aa061cff7
SHA1

e6911cf06b30e48244c62c08479e5df03f32970a
SHA256

8067342812e8fee9dc78b51e57c8c9402598bbfa7742355e2e58bc77ce6be38d
SHA512

b1d8158b1fb87100f72d7d9901e332e72bb75a6d686a5d9f9fa61d3b883ff2376a40a837d17867fd7314843851e318cbc61ac596bcdd519da78db27e88f0995f
SSDEEP

6144:b/yiHYLTLIDz5jSBLO9155Ckt3cwZ3xwXc17y1lFE+BI/QsboV7eMkL5w0MXm+cX:b/yiHD8LOHHcshw276DEG48RCw0uqX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Shipping doc.exe

Files

Shipping doc.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 673KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ