DHL SHIPPING INVOICE[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL SHIPPING INVOICE.pdf.exe
Size

610KB
MD5

bcc0b41935f136c8b9fb70e802e9e5ed
SHA1

adb5d45027481c53c24206fe231e4352d262a0ae
SHA256

6e4abc6a114b9b50936426d9eba916fe2a4fa59e9e226ce1c369ffb092d8087d
SHA512

a95caeaee41365814e66e959fe21d7cfb0c6e8570dd427c9923068b4e0e60d4f75529395909478da2e8f080331bd2d9eaa439268c47277c02038d44eb4d2efe9
SSDEEP

12288:3U3YPJASnwPbU7wwkrBzHxd8+1yy3+3qHiNJ0GzCAQ2G6MIsAcBdVQyTzvvF:3JPFMw0vygsNiGnQbjd+yTTd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL SHIPPING INVOICE.pdf.exe

Files

DHL SHIPPING INVOICE.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

VZmP.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 608KB - Virtual size: 607KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ