DHL Notification_pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL Notification_pdf.exe
Size

775KB
MD5

efaed436b1191fee738133b2ee7e0896
SHA1

0b7e6466cddae65139b91b329b2129eaa3812e9e
SHA256

79b4a1f93f4a66c8058f30f2f942aa2a473dba4fb4d2aff83ed5759fcaae190f
SHA512

e61d376e334aac8b2e9b015cf153f19ef0292c77a77ee60242921209ad172e8f67323da50118c94a8b37b909e5cc961abcaf82c4a2ad93a72cacce3e5a8bbc14
SSDEEP

12288:8MbxfGuWlyBwxQmb5VR3EpD6pzvyTRnEyL:HxffWlGwOk5VR09EzvyBEyL

Score

N/A

Malware Config

Signatures

Files

DHL Notification_pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 772KB - Virtual size: 772KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ