shippin document[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

shippin document.exe
Size

717KB
MD5

0f20d5589ea196c02d601a6ae7cd2ef9
SHA1

844658856b5537fe495c0bc5acf19de7e6876a5f
SHA256

8a5024ca7e74fce854dbfb989c0a5e3e80c1e70620b6fba6b7126a6842ce02a5
SHA512

c933f8815e449cdeb71e4d779878c8f6e5d45f6451aa354a163cce64412bc12ed78f4d2c7d0f04b6a1974fac3f43aa933d33689c5ece1f92dc1d4ab15a605805
SSDEEP

12288:Plv312Z3BBEGbRDkxO9HFp5vGQ+euZPYvrh+Mck1kBLERGBn:PJ312ZBvbRDXPsxZPYvl+Mck1uQw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
shippin document.exe

Files

shippin document.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 712KB - Virtual size: 711KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ