Consignment Notification- 6183111[.]xz[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Consignment Notification- 6183111.xz.exe
Size

827KB
MD5

2806045c46304fc981167ad6fc001abe
SHA1

4e9b89ac9bb206a9dcbc475c7eab763df551847e
SHA256

a91b7c840c36ad52a797e2d57285a488098d840ef2a4817b2367e0bba9cb8514
SHA512

eed3647797c62e0bd1f162590774e47b7d8e33bc850963cf0b18d2ea8aeb2ffb4e14440b07869fb53c647bff24f768804501725f0978d017f2287304c6642b75
SSDEEP

12288:3KvjpkDaBs/rGJgizMR3Ncds3AxmVNmr5eSVPRE5bzM7a8nurQ9:38FTazzizc3PWmXOeyRE5zM7v1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Consignment Notification- 6183111.xz.exe

Files

Consignment Notification- 6183111.xz.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

XkiP.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 824KB - Virtual size: 823KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ