Static task
static1
Behavioral task
behavioral1
Sample
DHL e-invoice.exe
Resource
win7-en-20211208
General
-
Target
c5daa4faa409c53b0d1d41f6ebf03b4dc8b09b3ccb98e2e11f70785f43ba1ec9
-
Size
242KB
-
MD5
0f2ce5a48d16f9f1e891e856484a7cb4
-
SHA1
2be0e14cffd88d3e34164d2e915c4b6bafdef12c
-
SHA256
c5daa4faa409c53b0d1d41f6ebf03b4dc8b09b3ccb98e2e11f70785f43ba1ec9
-
SHA512
754aba530c6487ca8eccfe09a075963910630517ed03343a0536ec1484fcba2dd5e35fc6cd1b35158e90acd8e41548ccb7ecc78ca58b2ffe51b6de8a4f93822d
-
SSDEEP
6144:bgoo8oihWva2yzqxOFDnpAV0aDGFKSeA/mkQbv:bgpQtqxOZnKVBweA/DQ7
Malware Config
Signatures
Files
-
c5daa4faa409c53b0d1d41f6ebf03b4dc8b09b3ccb98e2e11f70785f43ba1ec9.ace
-
out.ace.ace
-
DHL e-invoice.exe.exe windows x86
7ef69425fc222d0e85557975e1f2ab9f
Code Sign
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
GetProcAddress
GetLastError
GetCurrentThread
GetConsoleCP
GetTickCount
GetACP
SetLastError
GetProcessId
lstrlenA
lstrcatA
lstrcmpA
GetVersion
GetCurrentProcess
GetCurrentThreadId
OpenEventW
OpenWaitableTimerW
VerLanguageNameW
InterlockedExchangeAdd
user32
GetWindowThreadProcessId
CheckRadioButton
GetCursorPos
CheckMenuRadioItem
GetWindowDC
GetAsyncKeyState
MessageBoxExA
EnumWindowStationsW
EditWndProc
IsIconic
comdlg32
GetSaveFileNameA
PrintDlgW
GetSaveFileNameW
GetOpenFileNameW
ReplaceTextW
PrintDlgA
FindTextA
LoadAlterBitmap
PrintDlgExA
shlwapi
SHDeleteValueA
wvnsprintfW
StrToInt64ExW
PathCompactPathW
PathUnquoteSpacesW
PathCompactPathExA
gdiplus
GdipRecordMetafileFileNameI
GdipCreatePath2
GdipIsMatrixInvertible
GdipGetLineColors
GdipAddPathClosedCurve2I
GdipGetHatchBackgroundColor
GdipTranslatePenTransform
GdipSaveAdd
oleaut32
SafeArrayCopyData
SafeArrayGetDim
VarDateFromR4
VarUI1FromStr
LPSAFEARRAY_Marshal
VarCyMulI8
GetVarConversionLocaleSetting
CreateTypeLib
comctl32
Str_SetPtrW
ImageList_GetBkColor
ImageList_SetIconSize
PropertySheetA
DSA_InsertItem
ImageList_GetImageRect
ImageList_LoadImageW
ImageList_SetImageCount
ole32
CoTreatAsClass
CreateBindCtx
HWND_UserMarshal
OleCreateLinkToFileEx
DllRegisterServer
GetConvertStg
CoFreeUnusedLibraries
OleConvertOLESTREAMToIStorageEx
CoSuspendClassObjects
CoGetCallerTID
CoMarshalInterface
CoGetCurrentLogicalThreadId
MkParseDisplayName
CoEnableCallCancellation
OleCreateEx
OleCreateLinkToFile
DllGetClassObject
GetDocumentBitStg
UtGetDvtd32Info
ComPs_NdrDllRegisterProxy
StgGetIFillLockBytesOnILockBytes
advapi32
SystemFunction001
WmiQueryAllDataW
LsaSetTrustedDomainInfoByName
SystemFunction025
OpenEncryptedFileRawA
oleacc
ObjectFromLresult
AccessibleObjectFromWindow
AccessibleObjectFromEvent
GetRoleTextW
AccessibleObjectFromPoint
AccessibleChildren
CreateStdAccessibleProxyA
IID_IAccessibleHandler
shell32
ShellExecuteExA
SHChangeNotifyDeregister
SHFormatDrive
SHGetImageList
SHGetFolderPathA
SHGetNewLinkInfo
WriteCabinetState
SHObjectProperties
SHCreateShellItem
StrStrIW
SHSetUnreadMailCountW
oledlg
OleUIInsertObjectA
OleUIChangeIconW
OleUIUpdateLinksW
OleUIChangeIconA
OleUIEditLinksA
OleUIConvertW
OleUIBusyA
OleUIPasteSpecialA
winspool.drv
SetPrinterDataExA
GetFormA
ConfigurePortW
EnumPrinterDriversA
GetPrinterDriverDirectoryW
OpenPrinterW
AddPrintProvidorW
EnumPrinterDriversW
DeletePrinterDriverExW
version
VerFindFileA
VerInstallFileA
VerFindFileW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
VerQueryValueA
Sections
.code Size: 368KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdattt Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ