DHL AWB TRACKING DETAILS[.]PDF[.]zip | Triage

Sharing

General

Target

DHL AWB TRACKING DETAILS.PDF.zip
Size

1.8MB
MD5

c2d0b18e937040216b5b873f9bbd61f3
SHA1

b61a00135f50dfb7a3375670b754096a991748a3
SHA256

da68ce6df4bc7ac85ceae010c0b56e8ab0cc92d4cd3f47660a3ac036e8b47d06
SHA512

f802bf934e05cb06156a11d86b72db10785b80dd54c2ad69f4462b8fecaffc7482029438659b7f83ada743ba758bd84ade37445b0ba32366dc08380f53f2bf5c
SSDEEP

49152:ZuZVwhdUXsmTgsaNalhuSNdd+7qIu26UoNz6tIDhz+:kZyrUcmCabxIqz2oNz6CDhi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/DHL AWB TRACKING DETAILS.exe

Files

DHL AWB TRACKING DETAILS.PDF.zip
.zip
DHL AWB TRACKING DETAILS.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ