DHL_Express_Shipping_Doc_pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL_Express_Shipping_Doc_pdf.exe
Size

726KB
MD5

5922a69029381be73d4a1e9abafe07a8
SHA1

207550037f702726a9f57e9df15030ebe033ce4c
SHA256

3b0ecad36909f8dfef5273f6e14095ebbb7fecab7bb1935148b83f0509ce51a0
SHA512

c3c96de0e6f1b6cf885eb1e770b4ced6346c15081ab5b346b67156c8d8d68f19fbb40d0a62b82d546df6ad03b9f1ef3d93e64736e40f5306336d675d7059dc0d
SSDEEP

12288:VWb6DNdhs72d1mbTP8rayeKA5siX2JQHzR/xSkPSgmcz4We:4pzPCi5XX2JQHz2GSgjz/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL_Express_Shipping_Doc_pdf.exe

Files

DHL_Express_Shipping_Doc_pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 711KB - Virtual size: 710KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ