DHL Express Receipt_pdf[.]exe | Triage

Sharing

General

Target

DHL Express Receipt_pdf.exe
Size

718KB
MD5

0dc8386c4e396309a092d7bc21241fca
SHA1

711c4b75be58ff9e7baa832d5bb93469f9fe5d53
SHA256

d648b91e497bc62670602ae9cf08df7d4bab7bdee902b0db3b6e308b91ad34a1
SHA512

6c942ca08125c4e8030629d9c1846ca5bba001108dcec4e6548bba1f479ea0496b460cb15d1a94f061148db56d144912ced9105d2de7502f8d7e731bb95d1e38
SSDEEP

12288:yBg8iz0xPmaT1/iVZsv6BJXajCye+JLS5btzs8QqAcoUj0Eb3:ymd0xuaT1/8sUJXXye+JLS9t4IAcoUj9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL Express Receipt_pdf.exe

Files

DHL Express Receipt_pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 715KB - Virtual size: 715KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ