bill of lading[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bill of lading.exe
Size

784KB
MD5

bba24d95fced6baf1c8a40754e230330
SHA1

e0f70f84dca60e4195106fc7dbf40ba076565139
SHA256

fad7d96192d88c818e26a116f215ce6f3d8747773c26c5666c4d5d71053a466d
SHA512

8ce8bc52781a9563bb7b59fea2d63db527c8cbb38cc331a22dc05ff860cbf6e6d1892307304f432277c261ef7556aaee8de145595103ae965f640c26eae76efc
SSDEEP

24576:MK2l8q0lGafOqUYc8xSyBUHyZNv87spx94qXdV:FPxTfOqUr8glHyZO7spx94qX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bill of lading.exe

Files

bill of lading.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 782KB - Virtual size: 781KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ