Static task
static1
Behavioral task
behavioral1
Sample
DHL Shipment.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DHL Shipment.exe
Resource
win10v2004-20230220-en
General
-
Target
DHL Shipment.exe
-
Size
621KB
-
MD5
cf12c4fb86198b1ee7225cc0e38468bf
-
SHA1
c39b96c98e761b7e6c7a1661fd675dee1fd7d93f
-
SHA256
bbdd3c67e8780f70bb81bbd019cc39c40b8efb9653dcef5e625409fc3ceedd10
-
SHA512
a831b38350ae337cb907cebdcf09fff74265d650c29e3b5256ec7f80eae2dac3a88c3a9ec282c11ab6064d26b73b6b97368879c51b7ada5026637e4e9eeb3062
-
SSDEEP
12288:j2FWTEWKWSayXHX/eBdgG/bbFwTl0KHe/Ar7xaUXWJLLTkBjEk4x:S4TWWSayXHmNvuhGWaTJTkB4k4x
Malware Config
Signatures
Files
-
DHL Shipment.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 612KB - Virtual size: 611KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ