DHL - OVERDUE ACCOUNT - 1300403511[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL - OVERDUE ACCOUNT - 1300403511.exe
Size

555KB
MD5

665985173cdba41ae7c4245aace32735
SHA1

f8079cfe9ef0d62c2803b149d82a48661c054c20
SHA256

e560fff4201d484f88e6c7264d2791b3754504d138e0c0bdcdc99b771074d3d4
SHA512

8a83c80a4a58b7c71a66090d811065015a9dd37406adfc7f366d17705163cbe69122d5985e58e1bfa8fface003f8dc36c63be2e7bb3cb363936106b58e7621cc
SSDEEP

12288:kQPQ6NZEX9UYWxJE/5udHKOKzQ9GbPui6lsok+qEByNC5r9K:LviyxJXwaGbPuJ85TNqZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL - OVERDUE ACCOUNT - 1300403511.exe

Files

DHL - OVERDUE ACCOUNT - 1300403511.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 544KB - Virtual size: 543KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ