DHL AWB copy & draft COO[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL AWB copy & draft COO.exe
Size

862KB
MD5

fab20054dd4ad0b51fa6b8a81b04f5ed
SHA1

13424ed4be870854d55d0d6a901bdab83d96febe
SHA256

3d0c15fd0414979de2879493ef9b16fe7aa864f8e23ebe75b919ae04cd7928cc
SHA512

0bb464cafe7b50e11143cbf2d029819eb012382842e4cb9b0c5d98624df78a55f495a1b85c2b48d5b5806bfba44bf78127d8f6e66ea1cfaa04684f0f6ec1b6fb
SSDEEP

24576:Sl+yynEmDGxDedkMTqJ9eTGampEIYd+eLLQ01Ny7DdwGlZ+Po:SnYrkil95IUs0zyfKGlgg

Score

1^/10

Malware Config

Signatures

Files

DHL AWB copy & draft COO.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 860KB - Virtual size: 859KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ