DHL9407155789[.]zip | Triage

Sharing

General

Target

DHL9407155789.zip
Size

808KB
MD5

8871ce3041e8224ebfb13500ce3a102b
SHA1

384e3c5cf6d3cded9c8535feb570310ee2088784
SHA256

ca21195950410ac8aeadba56a4502a42dc653318fe2cd3a82fced583fbc37e71
SHA512

4a621b0b47b4d2efb9ea67ee27070a89579756982cd904012e16dc4550afd8a217f218ae6f56560e82881b9c63451fc15c267de743ce2077dbd796be4cd7c0c4
SSDEEP

12288:w1tmQmIv00vjzH4Yiengvp83PxtEKhp5tOQbLkHAPWFweMz98XhC26qQj2XsVlhP:S7vDf13fRhvtxK9qeRXhC2/w2XVaSqB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DHL9407155789.exe

Files

DHL9407155789.zip
.zip
DHL9407155789.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

fpvC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 840KB - Virtual size: 840KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ