Behavioral task
behavioral1
Sample
DHL DELIVERY INFORMATION_PDF.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DHL DELIVERY INFORMATION_PDF.exe
Resource
win10v2004-20230221-en
General
-
Target
72230777BEA3B7743DD098317F0761E2D609B345F96E5FF95E6EA13D3C14068A
-
Size
6KB
-
MD5
c8923861017ce5438e157ec5d1e1cf57
-
SHA1
7b5e65b787ec3df1c9c4905ca7f7abf871650254
-
SHA256
72230777bea3b7743dd098317f0761e2d609b345f96e5ff95e6ea13d3c14068a
-
SHA512
08c05dd633adb7abbd3eee985fdb3d17a07659c9e72e219c4d4adae0fe5f677d6d22eef4ae5346164d39fdd3c669f2f7d721c250ceff237896c026eac6640d9c
-
SSDEEP
96:tNCCqTbYka2MokvddL1bOU1R0we10jnp5SnH5127ACfXMr0MCcT1IIzBUuLxUdTY:mp/a51dLl1d/Pj7pfXMrjDXWSxUdu3Nh
Malware Config
Extracted
purecrypter
https://onedrive.live.com/download?cid=BD9480D014FE52E5&resid=BD9480D014FE52E5%21386&authkey=AI3Byd9B8ZLvyCs
Signatures
-
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DHL DELIVERY INFORMATION_PDF.exe
Files
-
72230777BEA3B7743DD098317F0761E2D609B345F96E5FF95E6EA13D3C14068A.gz
-
DHL DELIVERY INFORMATION_PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ