DHL_2017128 Documento de recibo,pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL_2017128 Documento de recibo,pdf.exe
Size

713KB
MD5

33780c0b1e1e947eb65ed5a3edb607de
SHA1

3a8232371bb5f2225bda4478919b26c23e3d30cb
SHA256

ab09c0ffd7bc126ae2c18376baf5150284030c9b34211722aa3bddc7e7a09df7
SHA512

621b5e8abb990da5cfe0793ecb2a84ebf21416972bd7e2d46efdb2d602a019b792f0844a9bc481a88822d0a68c068a272485986b9d378cdda71b5cf8d5aedb96
SSDEEP

12288:3Ouy3CoGtRq54TIhnIvT7SEzI8h4COdzuCYcqE:3lmGtRq5PI6EzI8BOdzuCYcq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL_2017128 Documento de recibo,pdf.exe

Files

DHL_2017128 Documento de recibo,pdf.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ