SOA FREIGHT SLIP[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SOA FREIGHT SLIP.exe
Size

851KB
MD5

a52b1e1dc68673081d7b8330f4222736
SHA1

5df0085f8771d64f6b271deb3d60dc1ca9eaf056
SHA256

813490a4f54269088113cdf7e413b2c9eae7ebdd9a88a51195b324ec6a0fcd3a
SHA512

85c906decc3c5797144f6a03673224811ad25b877cb3546553958aa429c206c8b8e5aedb3e2b065759316182da47efe7dc15a610b9fc65818d27549e4501ee68
SSDEEP

12288:eTZWmjzocUj9sAfoLL5RV+ILgzIkhLxmpDUCyVFGQIut7D2G5JKT5b4j:e1rjzocUaf5/+ILrkp4BUCCz76x4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SOA FREIGHT SLIP.exe

Files

SOA FREIGHT SLIP.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 849KB - Virtual size: 849KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ