DHL EXPRESS document 183764647646578484_pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL EXPRESS document 183764647646578484_pdf.exe
Size

808KB
MD5

6e83affc835491f0e575fd6381bc650d
SHA1

911f330b40f52b6309fbfa1c00dba94bb2e411dc
SHA256

546296386f790b239e38e70b371954f4ca87d4715bc3147497f82c466d721ce2
SHA512

0870709b72353432bf6b8616fd3ade09e464028c5f9caad58b928de13d549a82708b4dcbb3dd20ef6148b1edb58ea96f1746d65655013592d46964c072151b4f
SSDEEP

12288:njLZLPlFwWH3KHVDVflGZ0L+QCRKFFAitXASIokD2Cv:jddFwWH61D9lKWASkD2

Score

1^/10

Malware Config

Signatures

Files

DHL EXPRESS document 183764647646578484_pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 805KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ