DHL AWB# 15700638[.]gz | Triage

Sharing

General

Target

DHL AWB# 15700638.gz
Size

883KB
MD5

b1ef54c9696a11bce3307a91dd6c9484
SHA1

996d22eeac9d682b917af99d178918aa65cc7a8a
SHA256

8ddd5afab3a24facb57e304ae890c32e1b5d2ce6543f0572d5a6cf06ee445ba9
SHA512

567e7a3bd4fc6af571d117a21e23741a640fd1c7cebdfca9f9fe53da0cb4640c543e9a15ad8ff0c5f3264106cab1d0cf79cb072ed978558a7f0521a753ff957c
SSDEEP

24576:4xSUJxVgOOj/i8ZmvLHnX4ARpQuM1JY4Qb:4xjV4/i8AvL34AwuMvBQb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DHL AWB# 15700638.exe

Files

DHL AWB# 15700638.gz
.rar
DHL AWB# 15700638.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 962KB - Virtual size: 961KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ