DHL Express__21148791029[.]bat[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL Express__21148791029.bat.exe
Size

716KB
MD5

cfe13351c193be5c4b121831d6e3287f
SHA1

51392ebe4ef5bad690d8fe0b8369fa1dc2099703
SHA256

3ee6eac3f79fe9a20977759a92319e10b0f3833b081bd72215e623f8b9424443
SHA512

09f1a3b7c36e7475de86976fabea5ae647d3666755946d52aaa9161deed3fbc3cde52ed4a199d955e75adcb7fba7bfbbdadd8778c59b1f1fabb9bbdd4e74a649
SSDEEP

12288:Xa1eIoIFFHgeg/cAniF5tWhjq1TAoN6hHYfNAzLs5efe6cpxbEo9hQOjnQiUcjOv:jIXFxtnt4qhAoN6BuAs0e6cpxbd9hDQH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL Express__21148791029.bat.exe

Files

DHL Express__21148791029.bat.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

VYUA.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 704KB - Virtual size: 702KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ