SHIPPMENT[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SHIPPMENT.exe
Size

886KB
MD5

4713815d01ba7f9a77a0bec5aa34d1d4
SHA1

0cb5b74af08a1502d4d525d293678fbd6b09e8db
SHA256

85c947b965f77ca575d542c722023f7a2f2c7766e7e5437932dd684bc8855dec
SHA512

607d519fd9d866222e7ae53e7765b578f1ab6313a33466c55f49b3d26d26d8912f3a4e220d53b0617d7a8594c511e41042413d11f9182d81a2defd5e8efbc1ff
SSDEEP

24576:PMpppNpppppoOQpppNpppppoO7uayAeU+6HAePiyMcjuW1:PvO7O7AAedcAeqyMcB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SHIPPMENT.exe

Files

SHIPPMENT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 883KB - Virtual size: 883KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ