AWB DHL 54900000789[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AWB DHL 54900000789.exe
Size

877KB
MD5

12ee04f571ba2b4843ad9aa431904eee
SHA1

ca47797fe39e78f96bb010bb7c358704370ed83a
SHA256

ea838ad000acd44a3a8abc21a9e131f32ecd9a197383782b516dda22d6047105
SHA512

4fd1ca7b9d6d3d78e9f514861feef88f1d0be3a6b2995bf0598113c4cb82ec08898b24ade4db50d1e72f3a059c1653a840306b7bbde233be743b2ef14b350a25
SSDEEP

24576:s24XRWFYuCNRMgNoHszRUgLhuSANbhSO:FV7CNWMYshL8SARM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AWB DHL 54900000789.exe

Files

AWB DHL 54900000789.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

jKzD.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 875KB - Virtual size: 874KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ