0c906e54f56be90265818b449b42c76c[.]bin

General

Target

0c906e54f56be90265818b449b42c76c.bin
Size

603KB
MD5

948861f38947ebbca70a60a3cb6bed0c
SHA1

497449030157b902c3d255072d197ad70e765112
SHA256

d5b3d86f1f239cc4a5ee056c3e79785b45aaac7add7272e5052925eec405a68b
SHA512

28ada4721a5834796fcc170da83c14f1d5e99e1b6c50a5077c876e038038cd1f465142d3a02293edf4914d996ff54daa0e836364cff0080bc6469c329ee6aa84
SSDEEP

12288:M8tblAmS+KhUBIeCgAeGWQBHTEJNqQBm3I3qch1m7r/2P8VtFEpCg:7blVS1hdTUGWQtdQBSeqc+by8SpN

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/DHL - Invoices - Past Due.exe

0c906e54f56be90265818b449b42c76c.bin
.zip

Password: infected
7ffd937a02fb56a1e687c22bf407e88559863bd09d1a8cd18eb63c44545b5d87.unknown
.7z

Password: infected
DHL - Invoices - Past Due.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 680KB - Virtual size: 679KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ