DHL- AWB 7344827125[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL- AWB 7344827125.exe
Size

844KB
MD5

d0ecd4c406fabe7d6007ba0fdb8601be
SHA1

222b803a73362c82403e9d54c6bfd77520ee3df4
SHA256

571cc0498824bbf035b1291c9dc08726c93a943411a21659916d2ed27e6fa3f0
SHA512

1a7bc62ab9ba45e57dd9428024808a17cb446253a54ad0aa09a0cf51fca043d2411de6076a9f180b12160cc783666687e56a8cb5aad1d971704bdc4a0248d728
SSDEEP

24576:yN6GEfZvSDSkd6fDQ6eC5W2YpRvgDpnLT2bI4hwbOQoEf4d8:C6hf5SukMPgbpRvQLCc4hwCcE8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL- AWB 7344827125.exe

Files

DHL- AWB 7344827125.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 838KB - Virtual size: 838KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ