Shipping Doc[.]exe | Triage

Sharing

General

Target

Shipping Doc.exe
Size

1.3MB
MD5

5ae50c79338b5057630353f0c820414c
SHA1

5615e0b64a7a35275df11a18af8f047951179950
SHA256

8e3ac6299621f2785a0720774b5c9fb2db6a96378d9edc15b1952e70dd748a41
SHA512

273ca6202766ee4cf650d95a39453b1aa9be15cc7dab37a73be845bb4121169c8ac07c671d57311816d235a6c45574dcfc1ea57269fb047d150fe73c91ff92eb
SSDEEP

12288:KmqBBtnm3n0He9DlpzIpk1qaxbxQxkT4/rJw8flwykcnM9lPuTO47QpilQP/dUB:96BKVSMqaQlhEfOhqsJ5+pL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Shipping Doc.exe

Files

Shipping Doc.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ