Static task
static1
Behavioral task
behavioral1
Sample
DHL Notification_pdf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
DHL Notification_pdf.exe
Resource
win10v2004-20221111-en
General
-
Target
DHL Notification_pdf.exe
-
Size
850KB
-
MD5
1e4e01e01d0c1f5a03e137080a560491
-
SHA1
e914db8a4fbc71d372f4b5d79d104af2cb55fa78
-
SHA256
07bd1698b72362459c13023294aa6ad86f5f50b4cc2f7e83810020a2dce7d5a6
-
SHA512
e0f1ba2955ce45f72fc4a77119f4bb37efab4054b7d6448a348791040b00ef30a5ae747df01fa0f6385c01640a96d91e1c9ca27456639b0f4d2c9507bf784a05
-
SSDEEP
12288:xod2kWcRLDUVLwDdgT21GUumZJbxpDF8xW1Wc7s5NZdBaB0I2Z/CffRNqOjzPs4j:xodgBW1Wc7oN3BaYUXpjLktPCYUP
Malware Config
Signatures
Files
-
DHL Notification_pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 848KB - Virtual size: 847KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ