DHL Shipping DOC_69793741770[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL Shipping DOC_69793741770.exe
Size

696KB
MD5

38347fcff8774ad409e77563aedbaaa2
SHA1

2ec1f1f9dc58c57e3727d2d1ec63f7e2802c333b
SHA256

312783562439afa6feb4e46153051e5af5e7c15f139bac75a25afd38caaed1ce
SHA512

ed185b97822173067bfce1f7d99a527846162708f5e2944843b19267705bbb4dc3df6c27d6dec34307edafadd2b100460316f39e7938d6527add8ded37745c40
SSDEEP

12288:lsJ8jhCb2exiTveLqFYrTEBOPrZOIj2bdn6v6wK:+J8jUb/JuFypZO7dn6vh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL Shipping DOC_69793741770.exe

Files

DHL Shipping DOC_69793741770.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ptQx.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 693KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ