rDHL_AWB_907853880911[.]exe | Triage

Sharing

General

Target

rDHL_AWB_907853880911.exe
Size

689KB
MD5

00e2917356ad724e3f79e42da2b9b92d
SHA1

e564ed8660919c10570fbad143ffd1333b81fb47
SHA256

80c33b55bc86034d5aa09175c45672e6bd847ed97938512772926f0d9285dce4
SHA512

0feb020dca29a31ec7bf0e6ba21bfb80c3b6541b92afc382594058de338536aa535c1dfe16346e400e786b29e0deec65d904c70643e93985724a7fdb01f25327
SSDEEP

12288:W5MYNp8wGcM1iwYa3ZOVv5A1zoiGz5BNvS9x8Z9YzzjbN:W6MuWa3ZOnIzoPz5BI9x8/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rDHL_AWB_907853880911.exe

Files

rDHL_AWB_907853880911.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 686KB - Virtual size: 686KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ