d2d2033e-a884-9ab9-5b9c-bdcafaa3a199[.]eml | Triage

Sharing

General

Target

d2d2033e-a884-9ab9-5b9c-bdcafaa3a199.eml
Size

957KB
MD5

d26412b583f35ff77466530a0c0692a7
SHA1

fb23d2637d6395daeae747ae82694953c0ff9f77
SHA256

29b14ce88e68ed7d93d11ac7a26f84c1abacc08725ea54571cd354ce12582afe
SHA512

a9e32538ecfa8cf33433839b42835065433dde0eb3520b4d0be9342bf38d697568e9609b9797b883246d326f8d2cebab3bc5dc08ace755d99ab7fa27c7ff0507
SSDEEP

24576:XQx6w+cEtyw9IFTp1g/P0jki25kPs5tBs0XlbE3S4:ARotywjX0FYk8VlV4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/DHL_AWB#6078538091.exe

Files

d2d2033e-a884-9ab9-5b9c-bdcafaa3a199.eml
.eml
DHL_AWB#6078538091.rar
.rar
DHL_AWB#6078538091.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

LNKb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 831KB - Virtual size: 831KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-html-2.txt
.html
email-plain-1.txt