Static task
static1
Behavioral task
behavioral1
Sample
Dhl_Express Shipping_Original_Document.pdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Dhl_Express Shipping_Original_Document.pdf.exe
Resource
win10v2004-20221111-en
General
-
Target
Dhl_Express Shipping_Original_Document.pdf.exe
-
Size
1.4MB
-
MD5
eb06ebb2dcba1cebeecddecb9f70059f
-
SHA1
b362222310ab29c8f9f75c0090b6f6c181190ec8
-
SHA256
cf25bab7113e15292a6f44d5c643271abc9886a47dce5dd45efae4105b30ab87
-
SHA512
42b257b0011bff43cbcc6c1e8f83bb564f24b88efd81d8e4bac80a53bd66e95d9a5642c831cc1a4782efe366be75ae2e0ecce38eb83a20f7a20fe7d8f70a8f6b
-
SSDEEP
24576:xq3Efsm/6bhhbdYNKH0Xbf0iJ4297b/eqEavhsFpa2o4:xq3EfsFhDYwHobO29/mq95sqB
Malware Config
Signatures
Files
-
Dhl_Express Shipping_Original_Document.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
Z4O-#{ Size: 972KB - Virtual size: 971KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 480KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ