Dhl 993837[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Dhl 993837.exe
Size

690KB
MD5

271b5cfd76b69d53afc09295efad023c
SHA1

e1827e2df4ea2a1afd7f981c965c27aa612f6031
SHA256

976dc01048d8496d4697d2cc382fc651222354f25c3a8422a109a883b3c00b70
SHA512

ce428f2fef6cae4610b780ea1b2dd50e4f0e82a8d1e7d486c83c9425a0d6fa9b94d0ec5b43944c65ed519eced60a8ee194d0c1e87e936c506fd9aa7b2a58f2c9
SSDEEP

12288:e2iNzeWFm+82Hjva1wgT71fldWZHhwosGX4si/AsBg2m:e1tRFm+bS6+71fCUosjfAv2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Dhl 993837.exe

Files

Dhl 993837.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wVVb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 687KB - Virtual size: 687KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ