DHLExpressShipmentConfirmationst[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHLExpressShipmentConfirmationst.exe
Size

2.5MB
MD5

79b59b2de70ade6aed1b4f09b245a68e
SHA1

1ad2493f84a662ee0e45475eca7682b5eaf3c7b4
SHA256

1e3699d908fa2e6027c9deeb4fce5c5b046e3ccc12723d6b734c837097e89efa
SHA512

38b3e5cf163f418765407f39efb665ef791373522bb0d29abbe3ac5e3deacc978cc93bfe34e5b0efdf0d20c585728e8f2a8b0faeed4406d6cc52bfa5c0ad15f1
SSDEEP

24576:MxSvi62kgqxM2+AQF0wSihcX4BKWs7gVYOyRQr/ZXHL/YS8WqoFFmMxLRc7yVDkX:EK7a9DS4EN7gVa8RXHv80o2VY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHLExpressShipmentConfirmationst.exe

Files

DHLExpressShipmentConfirmationst.exe
.exe windows x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ