Static task
static1
Behavioral task
behavioral1
Sample
DHL Notification_pdf.exe
Resource
win7-20220901-en
General
-
Target
DHL Notification_pdf.exe
-
Size
907KB
-
MD5
a63819a14227fbfb09bfe76a6635816e
-
SHA1
67e165bdb5b954464b9b8586ac2f12e304cd5e57
-
SHA256
0d281b8d5f9c6d1b0a44d2df62a0bff19a14097826ab821218563b3e2fca7826
-
SHA512
9d166aab889d63e3f8d191441ce9c9a0cb02207fd96f490670326fd99c15f2e2bdec3f7d66c60329fad3e49fc69ef6051f891417b210a60f566cb186e7327913
-
SSDEEP
12288:MOq/oCJJ4mUs2iNaj/fieXm40ME2AwuiqO6ePGEDxQNUTXECiOEWM5:vVmUs1C6ODEBit6e+ExQU3CW
Malware Config
Signatures
Files
-
DHL Notification_pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 904KB - Virtual size: 904KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ