DHL SHIPMENT DOCUMENT[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL SHIPMENT DOCUMENT.exe
Size

752KB
MD5

ea578c3ee5226e1880d2ec5634f37c73
SHA1

d6256012eff236df36ec0b938dc0a07724bbacc6
SHA256

f9d8de2f2c358a5dd9e080b0f4f9b9f651e59cc7cecbec4c83e45197e1ffe13d
SHA512

c50e7d67f63386b6ca909fd94196b35407e95ab357d3362272b472056de1660d0d82674c8e3fcd468623f065c65942cc1f5614e33c3da870e5e902450861e572
SSDEEP

12288:6f+JSkYZcW9RopMfb/WT4UkuZfAGItuQjuoF7vfHYf14verGUY4+I1uStZOE/CTn:6GMFZcW9RopMfzW/ZdIt/juYH8e2/sIc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL SHIPMENT DOCUMENT.exe

Files

DHL SHIPMENT DOCUMENT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 750KB - Virtual size: 749KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ