DHL AWB & Shipping Document[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL AWB & Shipping Document.exe
Size

724KB
MD5

2e168dde770bf4206bc0db9f47634d06
SHA1

222b78c14beb7311069c749fa8e511b9ebee880c
SHA256

efe1847d37281288a5717c6366547aa0a1d79a06e4847ea0517066067a8f046d
SHA512

99ac1907c0af72e5ac797b7f510ef391fcf1bbdec70d07f46b95ea0b2ff2e50605a46239dabb8f07c81bc59cd55f880f524590537de67ceabb04b3ab4cb2fbc4
SSDEEP

12288:NOX9KmOIkefN5ZUgVuhxJ8JznU0nqOTgIeS2jw6jGG57KizZvm/:NOtwGcKmx+HdQbjJ57KUJm/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL AWB & Shipping Document.exe

Files

DHL AWB & Shipping Document.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 722KB - Virtual size: 721KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ