SHIPPING ADVICE#2025[.]exe | Triage

Sharing

General

Target

SHIPPING ADVICE#2025.exe
Size

790KB
MD5

114e2c7c234714bba8ce80b667ac599a
SHA1

434c8aa0d8aa18031a177bd93563b9877aa7eea2
SHA256

8d4e282e2b9e5122ffb797a2d661a24e4ed8db6d42e64f7d24a545ee3e3678c0
SHA512

058f774ed568f850a5f098b5f167c52e0c88ddf080cb91224b36d5a534fac0695edd6d1332ecfbc7bf13f5779781f13e27545ecfb0812cfcc9c256ac541f1258
SSDEEP

12288:xl09fTe8uWb4knO+zAYD9j9LCnrjrAXWwDOs5pW+3zOc/2Zw01/GVnwUIhW5D:T09fswO+zbj9mn/jsC+NAX/enwUn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SHIPPING ADVICE#2025.exe

Files

SHIPPING ADVICE#2025.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 787KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ