FedEx_AWB#51931274643[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FedEx_AWB#51931274643.exe
Size

750KB
MD5

7259e43bd865be924aec17dfbd1fb1b0
SHA1

f51e98580fdee682928795b0f63ecdbbf00e2c0a
SHA256

44f60f2e07b30b35271d5cf69039d42dababc9996aa25cec95599ac22e6a9194
SHA512

67510b73b5d7da6b185105a831f4deb9451fa7fe04922a440128d804c966920e31fefbff2655b1a7f87137b5bf454690ce3d7c8e5e215e4c6d3d9ae38a8b0500
SSDEEP

12288:U0WWObWs7u0hMgHk5odYd5UPMBreuK4504imK91D0ubuPy4lSYW:X4FK0hMokEYd5UDuVq4491wrK4l9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FedEx_AWB#51931274643.exe

Files

FedEx_AWB#51931274643.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 736KB - Virtual size: 735KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ