FedEx Shipment DOC_ 71341373717[.]exe | Triage

Sharing

General

Target

FedEx Shipment DOC_ 71341373717.exe
Size

567KB
MD5

186c45e39196c988dfbcdc2ec33636f1
SHA1

31b50e600504e8737ed47cecd50eca017b961f33
SHA256

87315498a98e525f805959cc316405bb4f937ee28b087c68838033ecd3cd0dd5
SHA512

95cf10df82c799b5f0b9e1acbcf1dc85d141062c9b72463c5077d5c8eaab208f43e4147cec5f6a87d0848245b5ade4e4b5ed1fdd4c1a04eb6424a93894fcb125
SSDEEP

12288:OBqD3ZxjJE8ERFtwuJCKVu5qvhSw/6z9Y6vwdQzWyocs2qL:OoLZxj6XFtVekhF/Ipvs2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FedEx Shipment DOC_ 71341373717.exe

Files

FedEx Shipment DOC_ 71341373717.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 560KB - Virtual size: 559KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ