DHL_AWB# 5047292261[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL_AWB# 5047292261.exe
Size

703KB
MD5

adfecdebb33662383c7e5b8af96314b2
SHA1

a6ef24a285da8bd1561227da1b1fe82da51a6426
SHA256

3dc989e1d6fb2c9d4bbe6482ef8794efdd6fa83f3abb73c993d33150ea56eccc
SHA512

84ddcfc4ab34edacee86890a7d3e6737d35326f76d2fff05cef232ea5e7f13f8fee35e7013b5920c3c74220923bc0e29b83719d74e5e71fd3d744b632cecdbb4
SSDEEP

12288:GiMPFA1uqHcZmlfIa0v0hgmG8rnxzp0nrtqotLFd0+zNgProMQPHTzM07PRrVhSG:b0FAMqH5wggmG8AQ8LFdjzqPe9rXSG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL_AWB# 5047292261.exe

Files

DHL_AWB# 5047292261.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 695KB - Virtual size: 694KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ