Shipping Documents_pdf[.]scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Shipping Documents_pdf.scr.exe
Size

697KB
MD5

ced83aeda1a9654139778170b565e99c
SHA1

e35cf928ba8735176469cb0d99a38538313d6a0d
SHA256

035b784824ed07c31f8d100b3d92777b5c83ca9113d882a75f13e8b0e283892d
SHA512

95f02caa7d63163e842d9a73703dd25e444021e4464192c739af98d27edbae3e8ab2b23fac47667bfce33a95554590c33bf22f3626f485a0d659af59b2fa4d76
SSDEEP

12288:GaLKt/rFfaZ6Q97aY2nfn+HQOtKbS0TrQVnN7okQWVl2Guzrcd9frVF:xLKN5iUAR2n/o8JA5QhGCrcdRVF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Shipping Documents_pdf.scr.exe

Files

Shipping Documents_pdf.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

lKxi.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 695KB - Virtual size: 694KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ