Static task
static1
Behavioral task
behavioral1
Sample
DHL Express Shipment Notification 7055208779.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
DHL Express Shipment Notification 7055208779.exe
Resource
win10v2004-20220812-en
General
-
Target
a375b59c83212f0e87fe8a88c7ea73b1
-
Size
170KB
-
MD5
a375b59c83212f0e87fe8a88c7ea73b1
-
SHA1
44be838555c4b7433af640fa98379fe92b5c137f
-
SHA256
ed72b39dc43df3989f60dc738ebe2651b185f048f22a3cdc5e1cfdb62025bf24
-
SHA512
b5d90090de7128cb2901374f1cf1eef85f7df0020b390204ecbdf0df43bc86eb4dd1da2b02ce22319a76bbf5a4c9e57c7595a32462fde5220d3309715dc44bd2
-
SSDEEP
3072:7s64hh5dnqdO4auoWdvD2Esz0AOJk91TcdtRU37z+x3a0Tui5r5C:ozhhqdOFlaWcFU/6jTdLC
Malware Config
Signatures
-
resource yara_rule sample dropper_html
Files
-
a375b59c83212f0e87fe8a88c7ea73b1.eml
-
http://www.dhl.com.vn/en/express.html
-
http://www.dhl.com.vn/en/contact_center/contact_express.html
-
https://www.logistics.dhl/vn-en/home/footer/local-privacy-notice.html
-
https://unsubscribe.dhl.com/VN/jsp/unsubscribe_email.xhtml?ctry=YBq5Iv04dYCToCoX4Ep9Gg&contact=u3ksvFTu9QQ3hskrZyTtIIveDKZzMGMmkrIJhAj8bDY&langcode=vi
-
-
DHL Express Shipment Notification 7055208779.ace.ace
-
DHL Express Shipment Notification 7055208779.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
email-html-1.txt.html