DHL Receipt_6015950460[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL Receipt_6015950460.exe
Size

634KB
MD5

be363f3daa5a822acd382fa73f6fec1e
SHA1

02113b6bc66f5b9d2c314c17ed840b163452110d
SHA256

2d504d5142b27bb57b54d806c01d890fafcc5ba3e41a9a38094ae426c63fb362
SHA512

fc7801c54e2b18f07c9ac5458a22486064b20cc2b4d717e5ea2636878a20589218fc1c7bc56a8fa52a138048355226af999ef74426e3f87c328513a7bc3465c9
SSDEEP

12288:VcbQ2d1mbThCm9Y6MDcpMdwjkZa5Nx8jGXX3AK1pgHWMIn4PS+2EBLo:JhCoYM6E5LXX3pAWR4527

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL Receipt_6015950460.exe

Files

DHL Receipt_6015950460.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 631KB - Virtual size: 631KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ