DHL Shiping Document[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL Shiping Document.exe
Size

730KB
MD5

e83f2b7e702afe96e4ef80d2d455defb
SHA1

0742365bd4dcfbfe74ecdeede2766ccb4df4128c
SHA256

6dec5d623ae09a2e17014760d22da6d288ce14a2465cee207d193f98d8e26ad8
SHA512

4165cc74a95cc2928c12596079a9b82282835f63383e8fcbd85b6abc17a13cb6149e88d7d0286d87e62a4dab227b65e7f012ff9270c956d4a830f1088d06d5ad
SSDEEP

12288:V0aedmMgPh+ngZUklbzB99GvEzunrBfOSFi6hXAFgRW2EAmD:ydgpEYlbz+XZRt

Score

N/A

Malware Config

Signatures

Files

DHL Shiping Document.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 661KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ