DHL-AWb 451387[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL-AWb 451387.exe
Size

586KB
MD5

12c1b30f4480bb23be1e4b5a84cf1cca
SHA1

1ddbd5c6b3000be23c2b56cf63b3c992ad2405f4
SHA256

5b7fd0a91db03a64277e79fa7e6b8d63674a8a3cabf30c78eaa56c70ba6b3ceb
SHA512

49301bffc83266c60db628a23e49c23e5210c3e007314ddd3cd4a360b21a2e78c2fd29e4e6c491c324debb134c7c4dbf745aa151241c058de18ca76ca45be181
SSDEEP

12288:sEC8TMXbuLiq9hfB6HwfehKps5LNUhlNYEJFUA53euRX/u/4d:i8Yu2q9hfB7fehKulSlNPJuAnRPF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL-AWb 451387.exe

Files

DHL-AWb 451387.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 578KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ