23082024_1403_19082024_DHL9407155789[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23082024_1403_19082024_DHL9407155789.zip
Size

858KB
MD5

e8f479907747d9195e5ac285b3d60a0c
SHA1

fbc5dddef329d7410f306c5a01f537eef884cd5a
SHA256

60c24a65b2b9fb8bae5b64195890d503aa245afbf0dde35798a9be6e080de46d
SHA512

cc832c774cb0fca93dbf35312bdaea0fbfbb0348d3fd2f694cce2e10f61499670504cf55e715fcf666c32a378dbc8bbd3fd7c5d67b67728e5fc68908cba46b14
SSDEEP

24576:3rHS8R6QtNvoYxk9WH4GDdFqInTQyG62jd+E4iSdt:3rHS8ptNgYxWWYGDdJnhbYdKiS3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DHL9407155789.exe

Files

23082024_1403_19082024_DHL9407155789.zip
.zip

Password: infected
DHL9407155789.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

VHoB.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 912KB - Virtual size: 912KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ