DHL AWB COPY[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL AWB COPY.exe
Size

2.5MB
MD5

23f897bb0995064c63785dbd7c87d565
SHA1

3a336a4ce848e4a03a94d711bb747bb61ed82c44
SHA256

19c971cfd9f834eb7ab25c07c6405e959f94c16686504d7e51a92e84519f55f1
SHA512

2b9841baffd239eac60e82d62458cdcc1b19cf075f02becfe59318dba912447d200ac170473332dc1a7e6813a7e80bc7b780f1f288aa910a4cda474b21a3eaf6
SSDEEP

24576:ofkRkYi+S8hcSLeKtu1Dze6HDpLWav5+u53XIBh4yzzrsrvs6hrj9HnlC877iNBm:nrfhEqhbzwpHnalg22XXMqsoa

Score

1^/10

Malware Config

Signatures

Files

DHL AWB COPY.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ