DHL AWB TRACKING DETAILS[.]exe | Triage

Sharing

General

Target

DHL AWB TRACKING DETAILS.exe
Size

621KB
MD5

6f1ab9d285df09ed31df2497a528268d
SHA1

96f7e4438a1fc56f107f90503d5508c43147581c
SHA256

4c9bf3b32d189c75aecf8bf527b845cfaea94c4acc304b330a925f45a003f9b0
SHA512

660d1979f0def9ee3b312f8612efadf1d2db3045a96b2a2cc6a20e6a8bdd90db77f700e96a94f2f7fa4c8d7c4df2d27c4089c82abf3bcb2075189d8da21b5ca5
SSDEEP

12288:SipMNBLA0CDMTGZMNzjwmm8ftxvOTUYHboSe1tnYsKdP:SiSNBE0CDoGRf8/abne1hYN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL AWB TRACKING DETAILS.exe

Files

DHL AWB TRACKING DETAILS.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

fqfE.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 618KB - Virtual size: 617KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ