72f7678095b2e212d0b3c3da5cf12821 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72f7678095b2e212d0b3c3da5cf12821
Size

1.1MB
MD5

72f7678095b2e212d0b3c3da5cf12821
SHA1

093eb005c06ead9aedb0965e9f5f392d22b56b9c
SHA256

4e91bcc380f2283929f4b8e6fc746e3108dd5ebac3ef8f7a16b6f831613ae1e3
SHA512

c2ae19b9d926282a5975d85ef2c0757bbfa2c86a17126f19c3ece65069e786c2153fb7db387198db09c90f139d9671d47803e0e8ac2172cc7021b2c7ed9653e5
SSDEEP

12288:pnCFpZeB7uGHKKaWU8drn/1iNyhpyv0oM+6yRXOuDvrq8EU0th6gG1t:pnWpBGHK4Um1dXq0oXec959n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/DHL (SCAN) Shipment Notification.exe

Files

72f7678095b2e212d0b3c3da5cf12821
.iso
out.iso
.iso
DHL (SCAN) Shipment Notification.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 634KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 367KB - Virtual size: 367KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ