SHIPPING DOCUMENT[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SHIPPING DOCUMENT.exe
Size

688KB
MD5

ad779ae9351217984ae38eb94089a02f
SHA1

31d73b286e2139c76eed2031dcda0bca44178844
SHA256

7c82e5efb828ae672d131f3b37ff0c4a4d7307b647a5d42a7f2d573584909e3f
SHA512

ff69f962f382b7598c680d012cd0925548b9a669989f0e1bcd03501e604f9f4c12a05545016b1d086d6bc154ef50cd0cb9693d945eaaff8c1e0dbe23c31ca20a
SSDEEP

12288:Db5yzvbYmBHreGEuARVotWGDF8p4K+YKKKCaQjzqH1aPsF9XjEG:hebY0KVR8Wc8eK+YKKR2V95j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SHIPPING DOCUMENT.exe

Files

SHIPPING DOCUMENT.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 679KB - Virtual size: 679KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ