DHL_Doc[.]rar | Triage

Sharing

General

Target

DHL_Doc.rar
Size

512KB
MD5

dc9e352339341f7d1cdd9ec6e7e5e07c
SHA1

e7c28f102c9d7daac9993c9bbf63a84c9a9da326
SHA256

acbf15c97bf58b8232d5446cf977c31442d239153b5eed6d44273b85212d754e
SHA512

897419e99ca5e3a54c8dc578a6bc2b8768d8c62c55b32e7da4f833a3a5e473c165eab47de0639193442be8ee820590bb779ad9f8c5c869d1bedb2f000d370eee
SSDEEP

12288:VPiX6cGV4ZK7TWdH3ArXa7YGJ+xW34ny4StfGsAa:Vi6pCKOdHwGxgxWHJfGsAa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DHL_Doc.exe

Files

DHL_Doc.rar
.rar
DHL_Doc.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 544KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ