DHL AWB# 7457866393[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL AWB# 7457866393.exe
Size

650KB
MD5

30375583dd8ff0bad6a65047b5964e51
SHA1

27ebff90f4bff3509885a3a9d531d1a7360c5d22
SHA256

8949ce9874d73dae7318b895406ebce9811bbb8b834ed5195b9cb0783bfd1605
SHA512

78ee0a2815f93847b29a5d391c36e145735b794d15a5dd21527da9a5e647fb127656e7b9e1a02edf61707759ce78f69c589e4af45392ec6461e9bef63abffd80
SSDEEP

12288:yV5ZefX9KsApVh1mKb+IhMs6IZYhw+fOoX2NJUc2hmtN+BN5SBnjteUyI3:rft+VDb+IaIKOcyx2heBUUn3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL AWB# 7457866393.exe

Files

DHL AWB# 7457866393.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 633KB - Virtual size: 633KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ