Static task
static1
Behavioral task
behavioral1
Sample
DHL Shipment doc.exe
Resource
win7-20220901-en
General
-
Target
DHL Shipment doc.ace
-
Size
497KB
-
MD5
c03ea1b55a3b2e49533586e63c334e09
-
SHA1
654502f868c4c062a71a55d53f8dbe85afe1468f
-
SHA256
6c27c2191c5182d7f2b72bfd6343e64dce5d6361d8940639bafd72b25bc4288e
-
SHA512
27ff42fabab08de51e22e86ecfc71f68b7d610cb400a207e2048c697989548d308f7bcedbee9b33030ba6906ef5af1f6f779bdfb29287730c552cbc00f94493a
-
SSDEEP
12288:9N1+4BYRuQshU17ja8qZCQCGaGh53YcxThrIbn076LX7Kc54Hx:YVuOoh5Icx17GLXu24Hx
Malware Config
Signatures
Files
-
DHL Shipment doc.ace.ace
-
out.ace.ace
-
DHL Shipment doc.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 866KB - Virtual size: 865KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ