Static task
static1
Behavioral task
behavioral1
Sample
DHL_SHIP.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
DHL_SHIP.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
RECEIPT_.exe
Resource
win7-20220414-en
General
-
Target
ff23502f02959c5a6a227342a4b0d1374ed59bd4ad2dd9baa48603ea6dd517d7
-
Size
1.4MB
-
MD5
4bef254bee75e556d95fe554ea533955
-
SHA1
a7c01ff15918059971eb7fe58459f0e50ea6b3bc
-
SHA256
ff23502f02959c5a6a227342a4b0d1374ed59bd4ad2dd9baa48603ea6dd517d7
-
SHA512
5f1533440b2c0da33643e514bcd0917061b545b55f1c1b43e1a713cbd8fa2283ed1ad252bdf97669424ba6b7f5545dce15f1eb0167ccf4ac5a60e7020500f3d0
-
SSDEEP
12288:PTmXsq9SjVMJI5Ud/770z4ZgmQYIlEX+olnhlRvGGhuu2458SDVzc9jOh3exmOe2:PTmfRd/7YXspNhl52458CCHo
Malware Config
Signatures
Files
-
ff23502f02959c5a6a227342a4b0d1374ed59bd4ad2dd9baa48603ea6dd517d7.iso
-
DHL_SHIP.EXE.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 646KB - Virtual size: 645KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RECEIPT_.EXE.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 166KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ