FedEx Shipment doc[.]exe | Triage

Sharing

General

Target

FedEx Shipment doc.exe
Size

648KB
MD5

1c49ab8ecbe5c56b91d2302a1fe959a9
SHA1

417842d38cd80164dcbf48ffa402dc4cd5c780d2
SHA256

00e18c9bceefb7ce5810a575af9f6325dabc4d2421a447433629f2e29bed20be
SHA512

a03f365fe7f4fe978ea829d9142399854c36f19d5a8e43b9829c357f5c5dc1e952120021727deaae2a2c3b50cb1b1f82a3f47728eef19c7865dacab20eedc122
SSDEEP

12288:SKtPplTY6RhKur4ospvr0+NsLoHRSqppRokbbOYlge5trhQyaJXMBjNR:SKJTDElo8vg+NaoYCNX1qyaJXer

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FedEx Shipment doc.exe

Files

FedEx Shipment doc.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 639KB - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ