Static task
static1
Behavioral task
behavioral1
Sample
DHL Express Shipping Document.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DHL Express Shipping Document.exe
Resource
win10v2004-20230220-en
General
-
Target
DHL Express Shipping Document.exe
-
Size
605KB
-
MD5
8a53387725ecb1b93e0f2df3a00c8c62
-
SHA1
a9da7d4d2480c01879303d16a4c51df989c3fe08
-
SHA256
f763364afc68ac355f06c3c0cc321715fe91c2d0fad76f206fb4713b3b79d43e
-
SHA512
a034391257a850453f93a6149edbff5bd5aac63a60bd4b3cfa5360bda4aeeaa7c9edc087e5f90e09877d54211d4528620eaf7913c5b09466531f9593bf18ad5c
-
SSDEEP
12288:MDBO5ZZC/W2n98zit94ORdymW7l7yEZGlt6ypcQrIMdcpEOPKQ89FoGs:MDqTC/fiz6ymW+vldpcoPdc9KN92G
Malware Config
Signatures
Files
-
DHL Express Shipping Document.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 591KB - Virtual size: 591KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ