Static task
static1
Behavioral task
behavioral1
Sample
DHL Shipment Documents.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
DHL Shipment Documents.exe
Resource
win10v2004-20221111-en
General
-
Target
DHL Shipment Documents.exe
-
Size
734KB
-
MD5
4359e2f6d069940a72610428f3c02bde
-
SHA1
d6d84bd7aaf66b88f813b04e5fa5ee4b562ca38a
-
SHA256
cacc6b67106b9a08c46f215e202ff0eb61a390b9bff9b0c00dc046fb3f882113
-
SHA512
fa014495c740ab5331f9965f60aed1b7ba61b43d2508483aea64559cbfbfd18c6270337ef3d7a33488b8ba6d00b37690f2eca3456373e3a15630d8efb45592a5
-
SSDEEP
12288:OVScihkg586aWHffq6ToQQvhJH8e5P5gGQ834DqjCKdN1Psy:MSZhB5O8fq6nQvnH8YPaGQn2jJd7PF
Malware Config
Signatures
Files
-
DHL Shipment Documents.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 732KB - Virtual size: 732KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ