DN TK 7239 (ETA 09 August, 2024)DHL#3272524765pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DN TK 7239 (ETA 09 August, 2024)DHL#3272524765pdf.exe
Size

670KB
MD5

31dea80f55b9485ad4dd9a8636b7b12e
SHA1

d6987a2bed5c0af40ffa425a8bcd5960bc2a16b7
SHA256

39c096e77e2ce57c75d07b577dbf5899b5e883a3d3435a0a3d0313a52718496a
SHA512

2cca917add60b40c877a315b50382583c3a6a07055290dfa7345214e6d9cbfe501ef524f65f3427672231b8a241e8ec0394231e1cd0d606baa706bc9e3df84ad
SSDEEP

12288:cu70DgkcKSx+zPDp2eZcnbgvsFxqFGC4SEYSU+9vzqqYVYRDl0u:T4DgksE3ZvvsFxqFX/EYD+1fYVsn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DN TK 7239 (ETA 09 August, 2024)DHL#3272524765pdf.exe

Files

DN TK 7239 (ETA 09 August, 2024)DHL#3272524765pdf.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Documents\CryptoObfuscator_Output\W7666.pdb

Sections

.text
Size: 503KB - Virtual size: 502KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ