DHL AWB # 2343881396[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL AWB # 2343881396.exe
Size

746KB
MD5

acd501b65e2e7f4aafb9922f66252355
SHA1

e04e2ebc01d2dc9423beef1d3431efda673eb649
SHA256

35b8d05a657c4ec7fd846203a5bbce27d1c9458a2f42e99bd3e72987f49c0e80
SHA512

fd1e8a8c7379dac353916240e0f4eed18fdcfc91764a686fa5154ac3bb73d61d74de140a2cece5c2a6f2857e7a627bceeb10583e526e2109b4404277444a15cf
SSDEEP

12288:x06gIa2iNP1UvAWlPZewp92mMsCH9aMJcrWCTiNSy4CPOehoWclX1ku6:6TR1Fevl4ProMJc+NbeQcPku6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL AWB # 2343881396.exe

Files

DHL AWB # 2343881396.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 744KB - Virtual size: 743KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ