SHIPPING DOCUMENT[.]exe | Triage

Sharing

General

Target

SHIPPING DOCUMENT.exe
Size

579KB
MD5

7d4894b0a335f4e2f2284d8dc63f49a3
SHA1

18a09a840f2bd7a697a2f18567d1f078a7c3fca0
SHA256

1c2cd12a2898ab0dbad796aef237fc205e0888f366f2099ddf2236b3830318cc
SHA512

bcd494b248a28a5c2e5e2b44613c8ba51c0c916729a3c968cec0c323a1626b7a79f599db94e47df13858894155b0a55ef6fb04cd0545607cd84874f899107a97
SSDEEP

12288:Fo2zyu9AlXg6elbKlILc5wgZaeAt+PKR+dyCVpM7oMidthzcqdE42lELi:a2zyu9Adg6elWlagMezKRSVpKoZdTzc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SHIPPING DOCUMENT.exe

Files

SHIPPING DOCUMENT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 576KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ