DHL[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL.exe
Size

760KB
MD5

fcf09191dd6c428f97ef37a5c5ed28d3
SHA1

6cdd5d8d44edd55695f27a2bcd630b6432a1c19c
SHA256

d0f80693d3549f105e2db006994180bb647006072a107571c0f408fc187d1621
SHA512

52afc22aa1d22f5347dfab0a848507843ae76d39f5965134abd5dcafb0031b917f24c5049c588d286a6f9ca61a3634a52d58c8c76e6202273a2e50d363c90dd0
SSDEEP

12288:p511KmYiK0Wria0wDhFWnaWGVCL23pWjH8L5vf6uwdqDAVbu:fPKJiyryoKzGw2Zy81bIvVbu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL.exe

Files

DHL.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 758KB - Virtual size: 757KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ