DHLAWBpdf[.]exe | Triage

Sharing

General

Target

DHLAWBpdf.exe
Size

790KB
MD5

56a1b1976aa39b794e64e5c5be60891b
SHA1

8cda901bde6e3d03e7917a9224af915f8b6c4915
SHA256

33451b5d8df79929f85d193cd594c0d29424037e52915991bcdcbce81a284635
SHA512

9c7ac9e6a9be744dcb0ae4d1b3df8d2da5e37b903b4bc0b9baa36b36ef0349da68b416bc58adb18978fd049b823e13a09865654d6929a054b78f25ecca64a0d1
SSDEEP

12288:cBjvR0xPmaBH8Qq8Gpo4Jzyb1WzOFrqA4pnhNW2naxmPcsHUT2/FctF+gDKFSWQC:cf0xuaBTqZ5yIaBqrpn733Q2q6g2CU/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHLAWBpdf.exe

Files

DHLAWBpdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 783KB - Virtual size: 782KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ