15b3fac5d98a81d176df2d78ed938f59ce24736e54549d0af8bd5e19099f3dae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15b3fac5d98a81d176df2d78ed938f59ce24736e54549d0af8bd5e19099f3dae
Size

662KB
MD5

4076e3d19361ee28b4d88895ef49af4c
SHA1

1edfb36ac9b862b28384f8c5140a6d3eb49b4819
SHA256

15b3fac5d98a81d176df2d78ed938f59ce24736e54549d0af8bd5e19099f3dae
SHA512

6edf536f71de910580dbfb02141f21445bd9fc67e96409643bf439318e9139d6ca9581b6f9ef49530dad717697c14fc271caeb46681aad4c5b5020f9dc13d782
SSDEEP

12288:+KiaT32nkX48s1ULNCLWf8rFRD3wY4h9mvG/aDXXQSuZgShJjFj4iKPJQMHO:+KiaTGCzsKL4LdRRD3wY4PGGSDX9OBhp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DHL9407155789.exe

Files

15b3fac5d98a81d176df2d78ed938f59ce24736e54549d0af8bd5e19099f3dae
.zip
DHL9407155789.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

kqsk.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 742KB - Virtual size: 742KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ