Static task
static1
Behavioral task
behavioral1
Sample
DHL INVOICE_PDF.exe
Resource
win7-20220812-en
General
-
Target
DHL INVOICE_PDF.exe
-
Size
861KB
-
MD5
f1589be43d5015d051f11789c5ff970e
-
SHA1
f5bd24c648f3b061c79351d68414cf92be1b30ce
-
SHA256
9a7bc435e3b4d8f39e7a10d51155aff4630dc32debd4a9b94d7fba1f28581c7b
-
SHA512
472848bbf843e0fcc3e9cabcc4a87634672b7575b616559a8cc91365bb0c7ffa19919dcdb6826d9e29b575f99300fc4b7d964f7c9a5e536916855a861ff32562
-
SSDEEP
12288:JwXfEulWyr471z3ulVRvLMyNOKzS5CST4B+NQ4sD6Q+GV4yWXiv:qU1zyHgph5MTO
Malware Config
Signatures
Files
-
DHL INVOICE_PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 854KB - Virtual size: 853KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ