FedEx_AWB#7805323204[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FedEx_AWB#7805323204.exe
Size

1.1MB
MD5

ae930595167a2b431e918ff9caf04c7d
SHA1

a81cdb315dfe6c4a5fe85759dbbed9d70ca73e70
SHA256

cc080dac2e57cd7ce34efc7e9cfe8d14ed9dffda5f95006f2d010557b08220f3
SHA512

18e2eed49d2cfe56fb10b3c8c0295b8ba958e1ca3f6c600d3b8f6d337c0e71c134ca0549da25a3acac9e88cafe90c4f1381ba36028f72b96a45fc8a2025fb4ee
SSDEEP

12288:dN59USIfKXHYjeI9rcAksbIieH2wYNKnLYvTqDwUOGKFUgh4p6+j97Pjw0K4tasn:dxQ04H9YAkIb7v89ukwujt34DSPP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FedEx_AWB#7805323204.exe

Files

FedEx_AWB#7805323204.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

bEu.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ