shipping doc[.]exe | Triage

Sharing

General

Target

shipping doc.exe
Size

797KB
MD5

d5c15f95d5d5c6c0d31ba8962ed64a7b
SHA1

4ec93e49cba15b99c6462f6fc40521c53de6e6e0
SHA256

d78af1c8636f1e75f7e7e36cea22b4d0cba176ec90119844e332b36b7687a8fa
SHA512

3743951d2b92073f10994be2a91775dbdb5e2d15584cd6ab4c1721d1d8e03a03304ce27b0c7c41d826658a5502cbff5817abeec1bca6e99d018b1a53e76eb78a
SSDEEP

12288:oO8CQmbCpZ6oJf3OPm6Qp4UXpU5SYiRpoTkr4xY3AW2O+GaUATocj1O0q:MBhqQp25SvRiTdxYpJ+d/LE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
shipping doc.exe

Files

shipping doc.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 633KB - Virtual size: 633KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ