Static task
static1
Behavioral task
behavioral1
Sample
DHL - OVERDUE ACCOUNT NOTICE - 8311493658_PDF.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DHL - OVERDUE ACCOUNT NOTICE - 8311493658_PDF.exe
Resource
win10v2004-20230221-en
General
-
Target
DHL - OVERDUE ACCOUNT NOTICE - 8311493658_PDF.exe
-
Size
757KB
-
MD5
9179d3307d1866cf6cf5298f794b27b6
-
SHA1
ad1009cdc2ba7ea7c825bb3d9f734b8ce3a7af49
-
SHA256
683532549c9b7349442f5dc3466cacc398bb663564eb63f77a2964dd216dce16
-
SHA512
83edec2e8dc0e0db6b0df8078806d2863b12d7f7c5058faa771c70e7aede591390c32eeee15679915d63a400a9eea9df7574905f1a81b94c16decc2397589262
-
SSDEEP
12288:RG4haDnLMzIL2q+RTdOL8mG8pTWQ68IfJzOXGzqVcVcrxaGw2xfYi2Zv5:BOyqGUL8mZTWQ4f9VzqVcml9Cv5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DHL - OVERDUE ACCOUNT NOTICE - 8311493658_PDF.exe
Files
-
DHL - OVERDUE ACCOUNT NOTICE - 8311493658_PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 755KB - Virtual size: 754KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ