DHL PO1001910 Sample Arrive[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL PO1001910 Sample Arrive.exe
Size

770KB
MD5

daded26f31f96a37ebd4433d504821c5
SHA1

df0814c0885f42e9847ac11d6a1c2aee6308760d
SHA256

bc188661882a67dab838348073ba76aacf22323be1575b97931553247ff13438
SHA512

7677486486784f2c90f531081e5a75bb7435c98feb7767a7339ca2e9b9c7d2b681f3322094da28e09489b6ee8314e6786387ddfa47b928cc419633ea5d3a4b05
SSDEEP

12288:Osmi121eqCKlxyHcWbDge1oIO2GzfaF83gUJ5ynZxaF4r:BmiEe1YScWP1oINGzfaO3

Score

1^/10

Malware Config

Signatures

Files

DHL PO1001910 Sample Arrive.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 590KB - Virtual size: 590KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ