DHL Shipment Notification[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL Shipment Notification.exe
Size

478KB
MD5

899e5595ac292a536833d8daeab4c4f0
SHA1

7a4e77d34254833252137c791d5d1b7ebc1c48e1
SHA256

365e0131d3119c3b3dcb8c1a9e3c143a793d1d3be324ce9cf7be38d5c2ff6888
SHA512

d9630d16d40dd0506456d626f2abed3abc9711553308bfad55f9fdac6379dd630fa37048fc5e0c01b37db314630751622071c88bb77d9c4ed57ddb62d0f8120d
SSDEEP

12288:Z6qHo6Dl+CyVCvrLIVbzvSrEagynAu5sxkH:HW0vrYb1oAu5so

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL Shipment Notification.exe

Files

DHL Shipment Notification.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 475KB - Virtual size: 475KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ