DHLShippingdocuments0020398484995500[.]exe | Triage

Sharing

General

Target

DHLShippingdocuments0020398484995500.exe
Size

513KB
MD5

1506261e1a6e12c9eadfcbe91a859f76
SHA1

061aa09172c0daef3fc975919a02413ab3a6f01e
SHA256

0dc8ced22931e20ec965bc36c06a974016fe223434d9553007b4a6c04973b2cb
SHA512

d8491578697b3308925637c9981d1544095741586e9369cec9330f8948c8dd7a09ffe9bf450f25e4c4a21e91eff00283d10e615acb866748dece290897ee88b5
SSDEEP

12288:d4S3sE6hTGrF3CKf04A1+0MX2dsFvs1HGqR:yh6rF3CKf1A1zKxJsZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHLShippingdocuments0020398484995500.exe

Files

DHLShippingdocuments0020398484995500.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 511KB - Virtual size: 510KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ