Maersk Shipment DOC & Invoice[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Maersk Shipment DOC & Invoice.exe
Size

521KB
MD5

c20111457da76fee6940ace7b6f3ef1d
SHA1

294c7ddc3226aad4273a3f3258c011058a4b7962
SHA256

82459746ad789498fb60c495e633e452cd072fe0ac457a0032cac23fd12f6610
SHA512

e38211c02659bbb22b7b0ad13798c71b5adc78fb186922fa0f1b432c8b96dcb65f5ad658e2327e52deb59f5d98cab418b315539d704875bb1698fc7081ccb4cc
SSDEEP

12288:c2iNXJuSdJh6DlKpeF8TO2MbvnlRwZNhGwGyUoU/iqU0OKhikHMxn:c1lgoJGKhO24TwjhGfyUPfxOKhF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Maersk Shipment DOC & Invoice.exe

Files

Maersk Shipment DOC & Invoice.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 519KB - Virtual size: 518KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ