rDHLReceipt_8939977153[.]exe | Triage

Sharing

General

Target

rDHLReceipt_8939977153.exe
Size

637KB
MD5

287c003f919180e57cf66343ff47789f
SHA1

b0171d7113dea955bb8d43e05d0bd8608b7b7e6f
SHA256

e14808468255a0635af33c8889be55caa22ee2bab8cf8da21d76882ef7f36317
SHA512

05281a492cbaf7db869d5405598e876361757aabaeb7074fdb77f688d3cca816590109319ba4b35590da8fd02167ce3a0840e33ab9f25591a66527c35514d3fa
SSDEEP

12288:Erv4NLHwk9N+XhtqcpOHWZLwPone+RlE4nMzAiBvmAmNnR1/JlYK4ENzqjvK:avUzuIHW6Ae+RyDvBENzL4EN0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rDHLReceipt_8939977153.exe

Files

rDHLReceipt_8939977153.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 628KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ