PI for FEDEX[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PI for FEDEX.exe
Size

659KB
MD5

fbb92211b3b08c89f279bf839cecc952
SHA1

2c66a9e4e89903057038abf4c60b40d03b300d8e
SHA256

bb5cc83f857d7ad7c07ff81596565db4238a065a4a63382b70aafb0a7327c4ca
SHA512

5e427993e1b6860eaab2a5fe4df359fdf5c3734daa06ee415eea27bf064fd2c5414c01d3bf2308038dc9207415a73dbc55a9f29bcf8ce52add143abe74329930
SSDEEP

12288:qcKsWWTzWTQI5754EqQ0YFMhY7FNt4dPNM+jUwDQFvFbatyzd:CsWWQ15EQfFNt4vM+jUwMJFbatyzd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PI for FEDEX.exe

Files

PI for FEDEX.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ACum.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 656KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ