Static task
static1
Behavioral task
behavioral1
Sample
DHL Shipment Document.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
DHL Shipment Document.exe
Resource
win10v2004-20220812-en
General
-
Target
DHL Shipment Document.exe
-
Size
776KB
-
MD5
c264faa2ece0c95492f93a79d6cb5c3a
-
SHA1
d6507a081525951bb964d22c37609af9b0c77bd6
-
SHA256
85219862dc49c260fa4a90f66f172e1a2a6201a1c38905298356436fc0d78381
-
SHA512
80638d0f13c35796fc0ff2db05212f359becf3ae65b030b23101c67c6d44c2384c954563428dbaa054fdc514658eb8cc367b88243a56410e6587bdff7ba58122
-
SSDEEP
24576:c1OVYGzx0Uta0oG376OW2gpQ84KnZaKCe3S:c1OVYG5a09376OWHbH
Malware Config
Signatures
Files
-
DHL Shipment Document.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 707KB - Virtual size: 706KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ