DHL_permit_copy[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL_permit_copy.exe
Size

663KB
MD5

118f43f24e0d1fb9f7f41209ea322a8e
SHA1

f8ec115462a06e0f2c2e293071671a0666a0480d
SHA256

5516bb55a913a6b1603ef303e563b22ede0bf361be46f37f3b22f66670079790
SHA512

56cb500e233c36428783de147ce7515c8f85d396f8265a2a60080b261c1744c664652e3dcb90cdd804e3b521cbd761eb5ed55f622b48a6063a04a0a8cb58c599
SSDEEP

12288:lWc/bUYIsYolnWIyN4LAlmZVqYLswIpIA1GXAs6M2EpGKTiMHRK:QiXrYo4t48mZsw4GXj6ETiMHR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL_permit_copy.exe

Files

DHL_permit_copy.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 650KB - Virtual size: 650KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ