DHL - OVERDUE ACCOUNT NOTICE - 1301669350[.]exe | Triage

Sharing

General

Target

DHL - OVERDUE ACCOUNT NOTICE - 1301669350.exe
Size

898KB
MD5

831fc966c265996359b2549f2e555f75
SHA1

338631118cfefe53a4dd6e542ce77a7ff90e6a3b
SHA256

0eb8bbeb7db95d53ff488d6177e646ad9d461e96d5cca5115e332d08352f4b15
SHA512

2e406eefa40c28df90affcab20c6e3b904051d64080d3f17eacdcbd4475d2c7dcc8523f59f42e9ad8bf8eb43f2cc878b07d7c949d98e5be4b2650b21f5316654
SSDEEP

24576:wT6J3aD9i0rcw035c/H5869dOIZy4hCoqdJ9B:GACETw02194Iw4o9B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL - OVERDUE ACCOUNT NOTICE - 1301669350.exe

Files

DHL - OVERDUE ACCOUNT NOTICE - 1301669350.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 649KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ