scancopyshippingpdf[.]exe | Triage

Sharing

General

Target

scancopyshippingpdf.exe
Size

737KB
MD5

370347aba2b49870171c625a63759e96
SHA1

662659b756079679b2f68da0a9da05dcbd4885ef
SHA256

e9a1f5e4de3dfdf6cbd66863a6fa6a638cce8fa9555991756820b5af48682c79
SHA512

e82de75505af21d52177dfc579a91898726b71fdc8d397058290c0286c53c9079caad56b214302ebd1c715ae7afcbbfdfe439ef75d1d1c670100553aea381c19
SSDEEP

12288:J5JF8B6slRIp8Tim9uBNyxVjoy15+2hE3vtlM1PH2ZGV3CdCrccu:J5NsRGGim9uBNyxVjRj+jFSHWGV3Cd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
scancopyshippingpdf.exe

Files

scancopyshippingpdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 719KB - Virtual size: 718KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ