shipment[.]exe | Triage

Sharing

General

Target

shipment.exe
Size

779KB
MD5

8f07580bc25a796a5f0b9100d349d0c2
SHA1

c7c39ff2db999f09d1aaca3bc0f29039d97de49b
SHA256

e16ed69e1d337d88539ff98cda8d36aabc495db375d68e4f9b86a1843ad8c679
SHA512

e0fd2a6273da3aecd7a864a6a33814b9ac8be1721c335ffb3a60c2f0641049573cab3674ee5ec03afaf83ce8997dd2c2cfbb583e6f71fc6357f6cc04ef811ad8
SSDEEP

12288:y5u6WhRSUunBczihl0qeCMzWX6xGoisoXH0stjWwOJ3jB/zs+Pnki3MQQdtGOqw:r6NnBCal2C/XWhzMVGx4+/b3NO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
shipment.exe

Files

shipment.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

bsHI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 776KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ