TRUCKING INVOICE 01168566[.]exe[.]gz[.]001[.]gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TRUCKING INVOICE 01168566.exe.gz.001.gz
Size

695KB
MD5

ee47ad5ac1c133ee18a5fee1fb4b30ac
SHA1

2facc486accb20f7afe4ece3033cd2bc2687a9ad
SHA256

04ce881adac5660788c1bcf7168b2617c28e5a1be76d0926d7b690f8e18a9fb8
SHA512

542103f987438f1f8f5a1543abf7c6ec2a934d4a17c4245dd215dfee2ff48e78e1633f6b1d3179698e8e6032b268ca8d420a9b456476bd9affc0327645efb242
SSDEEP

12288:byfQNNWT57c5YZc6bM9HpoRO6mdqFtsZDinWitpLvfv8MXXTWRfp0Pk:WfwNWxaJ6bq8OldqFtsZDcTttD4Oc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TRUCKING INVOICE 01168566.exe

Files

TRUCKING INVOICE 01168566.exe.gz.001.gz
.gz
TRUCKING INVOICE 01168566.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 835KB - Virtual size: 835KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ