FedEx_AWB#883079123201[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FedEx_AWB#883079123201.exe
Size

643KB
MD5

91b24cf77ffdfd619cda60a39803790c
SHA1

cdaa65e7764390ceac1798c8cd5a5f85e6e646e8
SHA256

a3bff963a78d300d87f4eb0b72b89f77dfe2949c020d49787bf69f78cf950957
SHA512

a1334c7f245b1213e851fc0894196bd6afda5f7ec1a8e2177a6590d839af0d397312dfa1f95ab48d40067dc83b209f9e34c7d52251ae82b9e68cc7a4b73291db
SSDEEP

12288:Wp96X6023fguZyesuZSvASApq9Vfn4XIRMJAjYt6Z/GON8nXVouTlsYM:WpZ3fgu5XSPApq914YGyj46YON+/TQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FedEx_AWB#883079123201.exe

Files

FedEx_AWB#883079123201.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 641KB - Virtual size: 641KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ