SHIPPING_DOCUMENT[.]exe | Triage

Sharing

General

Target

SHIPPING_DOCUMENT.exe
Size

768KB
MD5

26ddf6b21674df8a2e6c136955d1b776
SHA1

9518275a71b1636864b5de823caa6669d5559ba4
SHA256

7f80cc955b222e98716abc3f97759469bab7d009ee5d35d6d316555d187f4638
SHA512

6a9fa576de791c661bac670d4e4dee32813d7df2f4758db291c1a144233c39482ce2074541b5b5306e23a34e593ea4d7647ad27d261a843fe7a644cd42a89837
SSDEEP

12288:ARFk2QCWbARr2133P+cHLRydWmVz4btQcjExlYzL0kk/R7Ld/aItr2zf85:zVzFVHtSoVQkG/RXx44

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SHIPPING_DOCUMENT.exe

Files

SHIPPING_DOCUMENT.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 765KB - Virtual size: 765KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ