Static task
static1
Behavioral task
behavioral1
Sample
DHL Receipt.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DHL Receipt.exe
Resource
win10v2004-20230220-en
General
-
Target
DHL Receipt.exe
-
Size
818KB
-
MD5
a0287ae050e004a985518bd3876f7468
-
SHA1
b23d644d291d85e9d5cd9fab51b097376da7319c
-
SHA256
d97e6fe3154982ca946b03fa73600ef5f3b5e22a1091b691b5d37cebc9597858
-
SHA512
b17a31134282d45fe29093bd664aa9a57d64d1468d04fc2af0e887950f81fcc0e833f31c6630dada0c05d682dc89e8d12d6c15d6f64283e4e36c559dfc568c6a
-
SSDEEP
12288:ZFlLKHFjcsqUWx7sb0Yjdcxmv48TefDF641A366u8g0t8Pf+LcYYvnbZAhq1IyDb:XxP9q48yvAHJ+3EY/bGqiho1WML
Malware Config
Signatures
Files
-
DHL Receipt.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 795KB - Virtual size: 794KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ