DHL Express Receipt_pdf[.]exe | Triage

Sharing

General

Target

DHL Express Receipt_pdf.exe
Size

509KB
MD5

0ba192257e5e8cc03aa4a32e94662d3c
SHA1

47aa5ded3911bf5dcf92853371729f23c43976f6
SHA256

d45f5ad41b7903babda50ffd7511660f1a092699c0ec56ca0dc347fccfe0f208
SHA512

390b176c49e6a5e2bd79ee945a8f6bf0db353b1a3af3ba9cf635db77dbe3909661f78690cb8286bbba011399d2fecbb280dbaeabda8e2e7caf8d07bfb31d4ba7
SSDEEP

6144:C445KrJ92bYUWcMZTPD57MgeEYjuY/jP5lBlP+D+Kgp0PySHCcA4+2CIntAz/CUy:9tdVcK5JijPplM+d+PgcA4+2C8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL Express Receipt_pdf.exe

Files

DHL Express Receipt_pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 507KB - Virtual size: 506KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ