DHL Airwaybill & Shipping Documents[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL Airwaybill & Shipping Documents.exe
Size

905KB
MD5

245cbd5c1cf96e2d3fa2e7633c5e2b3f
SHA1

6ee2684351fbd77074677002492e8d3ad0046472
SHA256

8f311bef1921a04762ac16efb22f230ab5fbe25722f0c01dedb896676f26357e
SHA512

ca904b89ba3c0729ea5783f6a79cd8f3b65f2f730f0fd1e6c79914b35659e4e2cb8a8b48be23686f555a38f51091a60c8b3460f30a82c99abc481ce1365387cb
SSDEEP

12288:S2QbP/4XV2ufJr+2uaSTCT6afBPeZBjM6r0v8nvxiLATAGn3WtNmBNa4OCfup8iN:xQbnIV2ufVSCTdfBPeZFM6IEF

Score

1^/10

Malware Config

Signatures

Files

DHL Airwaybill & Shipping Documents.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 903KB - Virtual size: 902KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ