DHL Receipt_602595460[.]exe | Triage

Sharing

General

Target

DHL Receipt_602595460.exe
Size

618KB
MD5

2b9e095873b663295d82d3c7c5f1c79b
SHA1

a4444dfca040e652a12dd5f6ea0bf2da09c495c8
SHA256

5dd670d5327b9d83c3c05af6398f3c468f7d5ce97752f657f2794545ab39b458
SHA512

1d8f57dba643f190e04e464f9a60b42085400c00e1f016b62ff3914a8daf6fa0357f4d89af767d55d20384640a509291865c1fac04289a7d72cb636a9ff8416d
SSDEEP

12288:483IU8S6eUdmVbEanEEKJ0V+bGlj2hlVy6nipjnkc0f8IRzf4y6Nw0hMQvuU0J:4aItSAdmlEaEETmuj2PUVvszgU0hM00J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL Receipt_602595460.exe

Files

DHL Receipt_602595460.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 615KB - Virtual size: 615KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ