DHL_46773482[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DHL_46773482.exe
Size

1.4MB
MD5

c80973c70f85bd1306dde3638c065b4d
SHA1

ec78cf4edb5755a7436f405514f7915bee8453c1
SHA256

8ebab1052de946555f1e0e4a7f60d8a65473600b199662479bdd9054b135fadc
SHA512

59292d52998fc3e2262ce5c9112f23ea21eeb7f777332bdea9b209911812460e1baf5a9e20a906bbb3ef2f86f21b9aa6972c941b202ced1b85ee4ab10f82404d
SSDEEP

24576:jCfeRVeaNWTOFd2GwGba52FW21pX/9xd3vlKqNLzCpy+katRjthXibCHn:xOTOFd2GwCa5D+pX/zl9RzvCR7Sm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DHL_46773482.exe

Files

DHL_46773482.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ