SHIPPING DOCUMENT[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SHIPPING DOCUMENT.exe
Size

899KB
MD5

52c98dddb1780be0a1c0f1315311b190
SHA1

9e48fa8e0acc41995b4321bd2d3223efe263defb
SHA256

8e0efcec53b760c5a2978c474fd9491188d913167fe7e5fd4acca7ee2b6f54ed
SHA512

583adbaa50c1efce81ab482129814bac67d94547521620daf37af8c904a523c040e3b3b6670ccc81fd201e5a38ac8b38d50bafdb7bfdeba44a283e1afc47754a
SSDEEP

12288:4PIIkfrIkfnSWr35wvu3BiNicOmqLFnL9agviAvD:4wIkfrIkfS635nR6icOmYnL9ag3vD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SHIPPING DOCUMENT.exe

Files

SHIPPING DOCUMENT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 896KB - Virtual size: 896KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ