FedEx_AWB#50931274643[.]exe | Triage

Sharing

General

Target

FedEx_AWB#50931274643.exe
Size

611KB
MD5

9d7fcfbafb4a2bd4c4c146b9c105f8de
SHA1

81289d6023da1dc7ea2e3749b66242cb19f12275
SHA256

59a8979d512482bc6a656efb0445fbd1ad97b6c07e6b4353204c6992daca3e35
SHA512

3aac7f8537831c7015ef34ae803ddd587631b5ab57c99c607f7dfd1f379c2339fdcb3c516594461977dcda876495299893dc1e5b876cea798cd516d3819ca9cb
SSDEEP

12288:Wl725mONpEBq3sjz9z+325LjOEtH6wHl/W9L6oKnT7S/VPhrW7aSzRN//:jhRcvNt5TtH3HlO0cPdSdN/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FedEx_AWB#50931274643.exe

Files

FedEx_AWB#50931274643.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 602KB - Virtual size: 602KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ