Static task
static1
Behavioral task
behavioral1
Sample
DHL arrived.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
DHL arrived.exe
Resource
win10v2004-20220812-en
General
-
Target
DHL arrived.exe
-
Size
1.0MB
-
MD5
3bbf88766418850bf3552358e09341d7
-
SHA1
600b46df2c843afca73c0689cd073b1829ad6d1f
-
SHA256
90d411b4b7650a9098dc9fcc9792dd48749e410d49ef660287fee9336156646b
-
SHA512
449d62bfafbe13c97bf63447928d49d44216850c225953b2d363bd42cfc4dfdc258321dcaa4450135ea2f17671cf97c560470298e1b3a94d6cc2583c7156b06f
-
SSDEEP
24576:+L4+A6w+nGorX3g39NJrQanbCb05i/J1I1gbK:+c+A6w+nGob3GNaab7s/A+K
Malware Config
Signatures
Files
-
DHL arrived.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 904KB - Virtual size: 903KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ