DB_DHL_AWB_001833023AD[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DB_DHL_AWB_001833023AD.exe
Size

679KB
MD5

b9b5925e71a5802a12c139321309d186
SHA1

4dbba79b4e59860cf1fdd59b35ddf31337be1683
SHA256

eda98286056888838732e3394913161d04b8c3369c49f91edd6dde003b9b69fa
SHA512

d574d5094e45610b69d5c28600b3c3c0babcbbc113dc0da8410ef75c85332d842dae47dc0f8101eecbb9f8aa292e0aee17c8efb26ca62364dac608285b019af5
SSDEEP

12288:d4S4SOHc30CbSF/LhqPd/AcZUwdfuuHWzYZJVxx:d4SzOH03bw/1I/AJwWzYVx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DB_DHL_AWB_001833023AD.exe

Files

DB_DHL_AWB_001833023AD.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 677KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ