Shipment Document BL,INV and packing list[.]jpg[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Shipment Document BL,INV and packing list.jpg.exe
Size

561KB
MD5

5e4d39e60ff35813b11c0f7875c87d38
SHA1

b7664d8f8182e736a3cf4509c5a38fb1c17a7fad
SHA256

2e0d0762433ff21184bb4e8330db8fa104958537fad81fb39d8e3e7d849ee9f8
SHA512

6459b4de8cc328e8b124d9f220a8d695e239c7a974a75909ddee513e1b8979bb4852bf351911ba1c1cc3219210e4a4116cf3ba6977fedd326c4db6f6b1364a5c
SSDEEP

12288:trFfAdymAY2kcdbL4EfMRD9QMKOXSehTZk1lhlcGifGL6fq0:bfoN6GEfMRhKASehTC1lgyW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Shipment Document BL,INV and packing list.jpg.exe

Files

Shipment Document BL,INV and packing list.jpg.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 556KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ