UPS Shipment Invoice[.]exe | Triage

Sharing

General

Target

UPS Shipment Invoice.exe
Size

482KB
MD5

a462ed44d4be4cdf0bec5eab470a970d
SHA1

2380a9feab8c3ea9dc69f58e26b3e50e0edf2ee4
SHA256

d50ad11cd990b8a013247eaa4f0a7b1b0044720d56ea2c9834d9560d54e90a22
SHA512

705d26b9d15e07546dfae9a9ecd192cc3d7d0f74cd10a623611bdd5a09e52c5b8f3d578c51d15edcf171cde6b3a9cecc5513e4804ac29c6acd2daea4a0450567
SSDEEP

12288:3STS5c+iI+KrxN8DUCtwLW2klmz/up+lNXAzNpGUz:CL+idnRtyWZIGmXAzSU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UPS Shipment Invoice.exe

Files

UPS Shipment Invoice.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 463KB - Virtual size: 463KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ