FedEx Shipping Documents[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FedEx Shipping Documents.rar
Size

433KB
MD5

80b410dcb1323ecbc36697064025702c
SHA1

a2484397833510ec94707474753b3507c166809a
SHA256

fa1df66560aa4a0d5ed0000ce48ef96fb3b76d3cada52cb0ebe14abc470d1567
SHA512

9c35cd670c191be52b5b12e263f06506fdf69cd1abe951dae91d0baa85d8fc02bdb2e298b7c7dd2f890d25fb356feeb22dffa0b9c348c2117190afa2b2f171cc
SSDEEP

12288:1n13M/zfdazsiQMu0FXA6iwgXiP3y58PH:11Af0Tu8AvwBPCav

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FedEx Shipping Documents.exe

Files

FedEx Shipping Documents.rar
.rar
FedEx Shipping Documents.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 535KB - Virtual size: 534KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ