Shipping_Document3724[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Shipping_Document3724.exe
Size

976KB
MD5

004a8aafce60e0894823add679bb749f
SHA1

3acb90427d7f1b1f889ce04dc90f531330b4a758
SHA256

77b793bb0e1a76c821c2ce95add67a09dbfb3c2aba4b8de5b09cf4eea4546f99
SHA512

cefff6ee0893611ab046e6e6a7e754d6f007815b02ef78d2a96ed4bf8c98c28a8faad42d9a16f8ce78fb26316c22e3bcaef9baafb263381dc69b722c86e80015
SSDEEP

24576:1CMX/S6h78Ay0h21FiRA9pnThkoowbR0B+BWU9pSJFH:1C6/Sggf0KFiR4pTWoowbCwBl9poFH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Shipping_Document3724.exe

Files

Shipping_Document3724.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ijwS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 950KB - Virtual size: 950KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ