DHLXShipmentXDocument_20-07-2023_PDF[.]img | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHLXShipmentXDocument_20-07-2023_PDF.img
Size

1.2MB
MD5

2416f21f63fe32aeec0c304eba652330
SHA1

5eb5ae94df984f4b9e4e129119bff8345c9473c6
SHA256

7c69421cf89b640e87ccbfbd17c00b45c504a162798e8b3b68fa9e52e43c52bf
SHA512

8c349026555a983e69ee57ced4c8a67873ab11b59666d98428aab454df607623f84a2034c066c3870e95b868299579e6da11c035d10cf46a184edd69057628db
SSDEEP

12288:gES6ln+flo/XciMvMAArbJnMEk1eSkQYNn6fwkLCQ:gtTdCjEMAArtnkeNHib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DHL_SHIP.EXE

Files

DHLXShipmentXDocument_20-07-2023_PDF.img
.iso
DHL_SHIP.EXE
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 685KB - Virtual size: 684KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ