DHL9407155789[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL9407155789.exe
Size

940KB
MD5

3e530d3f2d7df9e20f5073bbf84c2fcb
SHA1

3db78cd3211b9e0184c35d6552a22560d13e4879
SHA256

72e3890b8af3c836705f640704aa03680b1092e5c021a2bfff35d931062bfd89
SHA512

ea07a0ae6ba1834eb552736171faf063249304ef9c9e2f5dc9704acde6461676fed92140afb588a27f5728b49882056da7eafb3883441d9346c54e3eec343c8e
SSDEEP

24576:KHH6h1O8ewEc2Vruud6UMZY+Xs2X6S0aAXrp:C8zedc5pUMZYKLqSs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL9407155789.exe

Files

DHL9407155789.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

HwJu.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 937KB - Virtual size: 936KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ