DHL_AWB 98946013276[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL_AWB 98946013276.exe
Size

874KB
MD5

38eb141c24dfdd48b93101a5db8834ec
SHA1

27771b6923151e39fb2dddaad1e6af2b2721038b
SHA256

cd5110082d76cfc5694f423ea462e55f1675bfbb04a4ad70ed5416a6377a97b4
SHA512

49443eaf6d9fa13571f205ea58637d6ec490a164c12c9586b62ca90aeba226537a04b5e5659a42921a265c3f4cfc4a54efe9ee40df2a98e0a47959cda5d6e79c
SSDEEP

24576:arCyC5XNyCw7ZMx9O7t6nmO5FULmbJ2GS:p3Rxw9OOMnFFaOJ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL_AWB 98946013276.exe

Files

DHL_AWB 98946013276.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 871KB - Virtual size: 870KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ