ExportMessages_2024-01-25_11-20b1f75179[.]zip | Triage

Resubmissions

25/01/2024, 08:43

240125-kmsx9sdaaj 7

25/01/2024, 08:41

240125-klt4yacca9 7

Sharing

Copy URL Twitter E-mail

General

Target

ExportMessages_2024-01-25_11-20b1f75179.zip
Size

762KB
MD5

2f449beabe11a78c5b51c5d6a3bef38d
SHA1

656feaf6372d23dc61d96b92e1a1638bf416b018
SHA256

5269c9e93cbceaf0bf97557ee68ffdb814bdcafab8038892e51399ea3f0243b3
SHA512

b75d41d33327d2f2c454287cf0d439fe772533079c9279b258cbe664d11233a9fb6b2acca78f027371058da2ffded913c5cfd9167af5cee422555688930a66f3
SSDEEP

12288:31Ga8JneEyfBSyLsSA1Gx599k7G61MRznjJsDSzdL4wKcdC4TEnZ7cui:31G1neXfBASA1GlK7ERDj6DSz90cdlTl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack003/DHL_AWB#6078538091.exe

Files

ExportMessages_2024-01-25_11-20b1f75179.zip
.zip
348b1b10-bb4b-11ee-986c-005056bd2dad.eml
.eml
DHL_AWB#6078538091.rar
.rar
DHL_AWB#6078538091.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 759KB - Virtual size: 759KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-html-2.txt
.html
email-plain-1.txt