Waybill_Receipt DHL4704321510pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Waybill_Receipt DHL4704321510pdf.exe
Size

137KB
MD5

6b512fd94524086c363a2d12863b741e
SHA1

383d836a88c06f0d8cc0f6f8249c7fafece7e2c9
SHA256

98f78a6c3ba93ab5350b3d148455261b214e9f29836f56305a0f8f72a7690d4a
SHA512

c724945eaa686ae365648dd129f572fdba582d5a94583d83935d58d572b6731c6d4c438b625b96237ee9ae731b9f6bea114c0e8548c141e2cc6bc32f08be185b
SSDEEP

3072:M64/4iUSMBl+jh3rvkA2GSFVfxpuu6xr4o3qd:M64/4pSMB83rIXxpHo3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Waybill_Receipt DHL4704321510pdf.exe

Files

Waybill_Receipt DHL4704321510pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ