DHL-NINGBOOVERDUEINVOICES-FINALREMINDER-456034158[.]exe | Triage

Sharing

General

Target

DHL-NINGBOOVERDUEINVOICES-FINALREMINDER-456034158.exe
Size

1.5MB
MD5

d43e31901ef0a941476b20b1dbeda070
SHA1

80aea35990d8dc0880a19520767015550e472110
SHA256

9d11df91076a23e06aff2cebcce4dba5ad51063ff1b8c479e1b1b581b6c54b37
SHA512

188405e1a06136ed81f03382116323991e2f819eabded4ed8116014c2591674541173b9682eeef5ac6a8d241d1be2b53adc0173ebcf4015e079cf62f32ab5089
SSDEEP

24576:CzsrQ375G2GQFjR5iWq0DJElzRm+t3kR8CFGBAtOau7Aw/VTqESkHk:nQ375G2GQJRRL+t3krFjOa70OEa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL-NINGBOOVERDUEINVOICES-FINALREMINDER-456034158.exe

Files

DHL-NINGBOOVERDUEINVOICES-FINALREMINDER-456034158.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ