Static task
static1
Behavioral task
behavioral1
Sample
DHL Shipping Document_PDF.exe
Resource
win7-20240221-en
General
-
Target
DHL Shipping Document_PDF.exe
-
Size
2.1MB
-
MD5
1272bf402ae8ccbb3cf205ff7a41c254
-
SHA1
52d28b2b076f582ccda0304a1e2a430c771ab8c6
-
SHA256
bdf8ef0a24b1b9ba71a13b952efb5d41ae80b761fbf8bf433d1a36cf53b92668
-
SHA512
4383d7080c4931177ac49f7f2afd480c74c8df8c99650fb20659d2df8d098461772d09ffbd337cbb29791ff869515ef2be5099b29b8d880c6cdae28d3df6a6a6
-
SSDEEP
12288:9b6F2dyeMpszAjGdgcIOH5evw7WgKnNBMn2FA0qKwjF2Bh5JkX2cI63rXdXWr2:9b6F24eJCeMOH5cw7WRNC2hw3fr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DHL Shipping Document_PDF.exe
Files
-
DHL Shipping Document_PDF.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ