Static task
static1
Behavioral task
behavioral1
Sample
DHL Air Waybill NO34065064864542-pdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
DHL Air Waybill NO34065064864542-pdf.exe
Resource
win10v2004-20220812-en
General
-
Target
DHL Air Waybill NO34065064864542-pdf.exe
-
Size
369KB
-
MD5
f5bdff19f2f366e13635adc8db0f74d4
-
SHA1
b4bedcd660aa1f85de13111f2a70ab0362545e12
-
SHA256
7060ad4beecfeabddd8164b64e84a90e3d73a8ab074062e80623cf26ab0f3dab
-
SHA512
ab4d4dcad62c83a6e4a920c2cb6b575fb7d3e97580c5e647827556b75bc585f7bdcf5357303bababf6034146601be37e4b5cc35a672aa130cb37f99c133b27e2
-
SSDEEP
384:GvRAAefZOm99rLozmeLIwOxnLa3/AbIe+yATHkPTWInfVL4yP1U:CGtfr99PozNLEgASyAYPTWCB4eS
Malware Config
Signatures
Files
-
DHL Air Waybill NO34065064864542-pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ