Static task
static1
Behavioral task
behavioral1
Sample
DHL Notice_pdf.exe
Resource
win7-20221111-en
General
-
Target
DHL Notice_pdf.exe
-
Size
843KB
-
MD5
abc971a4318aa36cfdb2f1f2fdfddb50
-
SHA1
bdfc826a1b32273a6de68b6ae8cf0ec015e9dd85
-
SHA256
296ea78bce9134af8d207dd915a66ad8345251887cf983ed1ca28e972f4670e5
-
SHA512
4067e52a509840e2d36a2406ed0f17ea81a1318f922fd565b17c1b88a8d5e3984ea217c9b65bdbb70f167ba118709eb253ad8bb1c2b3e7d87e6fa8ae11fc97a0
-
SSDEEP
24576:m1dH+AfJ/CcWD7mVKjom96F0xMpqG4yPa:mPHrfJ/d2VEmoWiq
Malware Config
Signatures
Files
-
DHL Notice_pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 841KB - Virtual size: 840KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ