Static task
static1
Behavioral task
behavioral1
Sample
DHL Notification_pdf.exe
Resource
win7-20220812-en
General
-
Target
DHL Notification_pdf.exe
-
Size
917KB
-
MD5
41713ef43555ad0ca715ddf78e5b92bd
-
SHA1
42f0eec6455b215f762605f2ffc1d4f5fd259def
-
SHA256
d89ea5834fee3ec91e2eb7234d63e63388681fa0882bb1efb1e0a495cba7a756
-
SHA512
ef840d9615a35e514d7e5d00d1dad7433c33faa21052a0e91769f29fd19c4ab3bebe38585e1b38b6db984855d90e26022574bf1b4c19e1e5b9fd0013e84b582f
-
SSDEEP
12288:Tx1/baCx4aEtX7x1f3PXKMqpq4Qe0QXt5Zu4IDTNcRkFWm:T+w4Vt7x1fPXKMqp+Q95ZNw5m3
Malware Config
Signatures
Files
-
DHL Notification_pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 915KB - Virtual size: 914KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ