DHL-AWb 451387[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL-AWb 451387.rar
Size

506KB
MD5

0835fab006ffe0033622f80ba3212b91
SHA1

4128298739d46aa5e3ec05aefc5d5fd10cc35576
SHA256

fee1491c964ce2a96ba7671cfb51cb3074d7863eb5332ba5150fae19e95b4052
SHA512

832becfbe5b9d9c95e45fc78eedc48bcc4e64bec15dfce884a7643bbbbfbbc1eb196da708e68a887d1d77d9b4716ed9ee895b62c4c73b8e190574a110678c240
SSDEEP

12288:J5YBdG2qScvJXlolFMi99Ioxf++wZ2E191pg:J5+gHSYXlolt9lF++KTg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DHL-AWb 451387.exe

Files

DHL-AWb 451387.rar
.rar
DHL-AWb 451387.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 578KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ