LogisticsCode[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LogisticsCode.exe
Size

376KB
MD5

ff7b717e1b73d8d4a29a7e0af7c378f1
SHA1

4e226bf9583cbeb222fffb557eb68186bef66c0d
SHA256

3d7fb8edd3e85b0050c2598ece09e14faab7b8842475c9bd47cd9c069608579a
SHA512

d540522a85277633b1ca29a9f907efdb2e2da52c29e1d9ebaef1e234a3c83527b6e2eff9a8417b3d56b11c4edba4d80f767f4366fcaaa2ce9efc78ec205bea72
SSDEEP

768:oOiNdU2LXjhGO+2HUV2oMVJIKdPx/40CJn5H/gSfeV4H7kVM7g8DhS+NArFpa/is:oOiNdUgdB06JIC5xCrgSfk8Y+NA2qNe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LogisticsCode.exe

Files

LogisticsCode.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 374KB - Virtual size: 374KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ