DHL INVOICE pfd[.]bat[.]exe | Triage

Sharing

General

Target

DHL INVOICE pfd.bat.exe
Size

626KB
MD5

f344a454d4cb1d1e01da2e2c080dac29
SHA1

3936c488c511a6ca05b992fda487ce5e971e57a0
SHA256

fd4ca109bbafcc509f99cea673648c2baa6934e9eb9a903b0c24c2e7f84d56c4
SHA512

2c71626ff41eac134c6f071c8ce124de87f46ec27ba4075bc452a80d4992688bbd7e056af74b8ab43d623dbea05de8311d76562216a7cc3f20467cfe22677f8d
SSDEEP

12288:DHWZ0mNke8OvXWRA64zeEZgrJckmzDQVpOOn99zgL3qF0KsUvwiqk8:D2DV+EzepS/DQVpQMsUvwRH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL INVOICE pfd.bat.exe

Files

DHL INVOICE pfd.bat.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

BJjO.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 623KB - Virtual size: 622KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ