Waybill_Receipt DHL4704321510pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Waybill_Receipt DHL4704321510pdf.exe
Size

137KB
MD5

fc68faec3d65bd94dfa5763e26d5edb6
SHA1

4564c47e04a75efee372dc4fa1bd459be3d7e4e9
SHA256

e161ad121646ad98ec52f6109b158e0401f1b62828beae357a3560f054fa5b48
SHA512

66431c3f3dbe5e08bd216e30be93b3115037668345788665e4867478abb86c9cea797c28731126dbe095a62f457225a7a5643be5bab5f4e7d8720a74580cd2ca
SSDEEP

3072:j64/4iUSMtl+sZ3OvkA2bNfxpuu6Jj4o3qd:j64/4pSMtR3O6hxp/o3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Waybill_Receipt DHL4704321510pdf.exe

Files

Waybill_Receipt DHL4704321510pdf.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ