Static task
static1
Behavioral task
behavioral1
Sample
DHL Notification_pdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
DHL Notification_pdf.exe
Resource
win10v2004-20221111-en
General
-
Target
DHL Notification_pdf.exe
-
Size
922KB
-
MD5
2e20cd4c0bacb0215d89790119b4c07d
-
SHA1
2296db4bde732ee09af6e61b6796835eca3f22fd
-
SHA256
c531fabadc6804c5ec1a9d2741e8e3a1366baca83b70acac740b9996489df4bd
-
SHA512
c4ee37f3d87ce9715bf6b17c518d89186d9e13a989762d031e100285df585c2c0e04ca3177ddd25d36733763cb2cd7c41f56ec2d8d9cf467bd1d04caa8abb4cd
-
SSDEEP
12288:3iK6qU+EZX8KtiKtNGrPF7AcIzqwDGWxGGYN1Kj+4EO1p49wDdzoa1cfN:yK+RF5NqOcJwnAGYc+RO1m9wDdEPf
Malware Config
Signatures
Files
-
DHL Notification_pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 920KB - Virtual size: 920KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ