freight forwarding[.]exe | Triage

Sharing

General

Target

freight forwarding.exe
Size

620KB
MD5

6e270eee0b1cc95ce1d2f8854307f280
SHA1

f1054d04e48047d050d5524d308cc94a26f02996
SHA256

2bad3cf2729badd3d5d317b0ca215ba211ebdf12fc903f504ad81cffa22a7b93
SHA512

4fd6b93a55107d034ec024217e942e53bdcf8f0beb75fd50cc305f4feeae71ab19739826fe5c712245b92b3397d265916d4b2aeeccccf9276becb6b5ef7b8cc6
SSDEEP

12288:IHqNSFbamWQQy8Edppn/Tq3AgpBreNdF6jgZJHd3JW97j8KXo9GLV7AiSC3X4:IK0WHyPrpLqhBsdFegZJHd3J87j8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
freight forwarding.exe

Files

freight forwarding.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 617KB - Virtual size: 617KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ