DHL Original Documents[.][.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL Original Documents..exe
Size

1.1MB
MD5

8f28048fb06759f4ab6f2b264926e503
SHA1

ec9f106b03a7c16c5ab0f0aef59b2e4ebf7e0ec7
SHA256

bc9a80c327839012274d763d66186497685a6b73e0b20eea73c720d61f5c9407
SHA512

d56e777122a5030b64a711d213c7c20360e63502266b2b6bd3ed8cd9348a190a38f9063ba2accbe12d872df0dc21ac881efef1e047f91c7968f5af7dfc6f8003
SSDEEP

12288:5dpqvQIeRbRMFtBRdj9wVh9m7TKsC+8DEZyQiK4HLgfrGBnDj0wEB9S/9reVzh6Q:3pbcHg5l1NcVFus/7

Score

1^/10

Malware Config

Signatures

Files

DHL Original Documents..exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ