Static task
static1
Behavioral task
behavioral1
Sample
DHL Notification_pdf.exe
Resource
win7-20220812-en
General
-
Target
DHL Notification_pdf.exe
-
Size
552KB
-
MD5
460e1ef118f702b193363c520b492e92
-
SHA1
8050b0486439c773c4bab659bcb00b0a8791d534
-
SHA256
59d3d0d82273ee3a78483d3508a8247593a06826f8531de8ca072718e6609598
-
SHA512
f1283ec160231a5ae402a2718a5c0474e2a114d26f13443330a13d468bec408e52643c44c7046d0ae7c4740bb0385bcd94d169562b6443491fa0b97556c50113
-
SSDEEP
6144:GoxvvklriDeObYNny/B4uIr8r9I3ZYhFo6tTExJZmcUUCTO/z45Oq1FqiK0PF0ey:Z9Ynu4zZYhFHKZ+UxzU39jq
Malware Config
Signatures
Files
-
DHL Notification_pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 528KB - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ