SHIPPING DOCUMENTS[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SHIPPING DOCUMENTS.exe
Size

1.1MB
MD5

bfe912060cf1dd12dd1459b8a4fe2108
SHA1

d68cb09ce644dd3f9a98ec78de4335ced889c33b
SHA256

333634b6e8955d62af9c246e72b31fb40bea3344adf37fe96a1a02d31cc5c43f
SHA512

a883591ad07035fc0b37d19d93f163db5d3c6aedb0d828f9d15aef17511a84718d0af8c1b7f6490ef473b8b10376c4e240ba42c7184a5f5216aa02efebaa0113
SSDEEP

24576:yW1zMT7ct/dnN7UEUG0Qct2v/4rhvcLcgV:yW14T7cNdn9UEdXWhvc5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SHIPPING DOCUMENTS.exe

Files

SHIPPING DOCUMENTS.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ