DHL AWB and Shipping Document[.]pdf[.]tar | Triage

Sharing

General

Target

DHL AWB and Shipping Document.pdf.tar
Size

475KB
MD5

35468e0cbf9edac0255de92bb4751e8d
SHA1

964708fc6f37ce858297804d2665802d45b95308
SHA256

0ff5f3ecca32ca4da4c4c7fca1ec532a2e53d647ca5433e9e72bccf09198611e
SHA512

b74f7c3ae5e4f1301fc71b717dc19eb868aac99c0243e8a85d550e3a8f2a9cae3d64c77ac58c2bf8fd0a54368827433a910c414aa7b5a8243a48792dfb2a113c
SSDEEP

12288:3MTJKG5O+xVqO1JA/JgMRUT07aU80NcAc8ddKbuBm43m:8TxO+xVg/JgMRUT0uFGc8msL2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/DHL AWB and Shipping Document.exe

Files

DHL AWB and Shipping Document.pdf.tar
.zip
DHL AWB and Shipping Document.img
.iso
DHL AWB and Shipping Document.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 573KB - Virtual size: 573KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ