DHL_NotificationAddress[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL_NotificationAddress.exe
Size

323KB
MD5

90ce9d097a51ae1aab50185889159eed
SHA1

244aaa884846b84ec1861eb50d04d4c7774359af
SHA256

036e5c62efb710505bffbc5c56ae768aadbe191fac296cd48bd9dbc0da9f7cdb
SHA512

423edf0bfa7b9589ae1412043f17979f866ed179ce70b14c4b1abb2dd70996c8add1359cf8bed39e12df2b8e8ba612aeaf6cd6604b49834a1791032b74a9f069
SSDEEP

6144:tSnItLBDRQlYyiL1+gvUDHewiGGGGGGGGHGGGGGGGGGGGGGGGGGGGGGGGGGGGGHM:8ItLtAYuDHe2x

Score

N/A

Malware Config

Signatures

Files

DHL_NotificationAddress.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ