Static task
static1
Behavioral task
behavioral1
Sample
DHL_FORM_20230203.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DHL_FORM_20230203.exe
Resource
win10v2004-20230221-en
General
-
Target
DHL_FORM_20230203.PDF.zip
-
Size
182KB
-
MD5
f7b598217fef1997f642e007b2eb95d4
-
SHA1
d013656f1259ff185d0e49f4eec4fe9b3e0d1bab
-
SHA256
dc0b650001028185b0f0cd8665479e80224a78eae4807b5e94b914d0e401267e
-
SHA512
df32e360e59364e4bfdd7a925852792c6aee07423975f7458265fd46e0276967beb9be1b291406bf1b247d2d58492a289a613ddbbb75ee790fc62a3d1485dc94
-
SSDEEP
3072:gQDJtOAAiXvJkb4ryBkNxheBaDFa828FcLNv1g0FkIL21ApXpLXspTKXCMI4m3AP:hDJr6ZBk/lDI8Ghv1hRDpXpwpT9om3+
Malware Config
Signatures
Files
-
DHL_FORM_20230203.PDF.zip.zip
-
DHL_FORM_20230203.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 225KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ