TNT Express_1Z3136W7049359723[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TNT Express_1Z3136W7049359723.exe
Size

567KB
MD5

8e525230d568a40fb040be427680b0a9
SHA1

d34e68902f4417dc6302cf4fe9ec2acb08092044
SHA256

6c635a7964534b07a6f3de24276ee3b7313c008721584847397cb89dcc536f0b
SHA512

0fab6368a2be1e0221130ec070dc286b1f14a64423ada10615f5b0027c8001dcbb0c6628a8722a5978600a249de36597e9f3fdc27d448e6068eedfafe5a15a44
SSDEEP

12288:9sB8Pd8mFXN+Km//gEuRsij/B6bjdqr0olW4MbSJQhVFIRao:9sBudxXsfURnjEBqVlpt0Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TNT Express_1Z3136W7049359723.exe

Files

TNT Express_1Z3136W7049359723.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 565KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ