DHL AWB # 2343881396[.]exe | Triage

Sharing

General

Target

DHL AWB # 2343881396.exe
Size

728KB
MD5

a20b5ad1e3f78ab76c922c4108ae8729
SHA1

7255dff14fae119677ca2976900bdde79316a5f0
SHA256

337ce11e758631b9327321060bea40342ee175113d93e8d293a6e6d08d008509
SHA512

f8e329fa06d19b7b332ff8e1f5afdbb71849071375ee580fc642e8c443e4d9f4ced1b32c3410d1859f2798dcc0e7000bf01922819d5f8a231dc867fbe01482ee
SSDEEP

12288:adEUY2iNtyYpQgBpVlaW/n2KvtHWjX+4mhh8GeZ7qNTHsZsdaNH3vHw5K9iE:JUY1+IPDjOKtWjXuk30pMZs0x3vQ5KME

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL AWB # 2343881396.exe

Files

DHL AWB # 2343881396.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 726KB - Virtual size: 725KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ