DHLXINVX74683783-Pdf[.]ace | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHLXINVX74683783-Pdf.ace
Size

516KB
MD5

65be24d1cc538be41ba3c50b3da0d5b4
SHA1

129ce2f7ace55b594db9a1348485688c19b097e0
SHA256

98901396ffcee504432365d8f25b07d330e6d82b4e1d70ab50091bfc854ca0fd
SHA512

f085a09450ca1cdacad3b741e26a4ea7cac265d30897c750363ad6dc5dd970ed7bcc302762abc4c7b9fb28bc6cb0505c14445cb75b7f83bb37e3225001f19067
SSDEEP

12288:ifb4mH4+TqzcZNB45bvGm3zkryzmPUoib/z:+b4NSqzcZebG4AeNF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/DHL INV 74683783-Pdf.exe

Files

DHLXINVX74683783-Pdf.ace
.ace
out.ace
.ace
DHL INV 74683783-Pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 567KB - Virtual size: 566KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ