Shipping Documents[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Shipping Documents.exe
Size

638KB
MD5

1f936998a57622365524a5f69c0d1c02
SHA1

ed1d17f04611bedead935c4bbfe4d2aa75f59ef9
SHA256

d86eaa75fdbc0d2de5b239974b02038200247b981ecc99074e86b5ad51a5906a
SHA512

dcfec0e49ea42f42080b639bf05f39592782e4c88928efba4d96550781758f09976e4aade3be2fa45ba98c3d10d092da8d802bd659970820575607523a2da777
SSDEEP

12288:b/j6MLCOH9MqE92drhI6DkkZh7ravtoLRt+x+YITIHQK:bL9COHks1hDkkZh0oL6O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Shipping Documents.exe

Files

Shipping Documents.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 632KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ