Static task
static1
Behavioral task
behavioral1
Sample
DHL Original BL PL CI Copies.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DHL Original BL PL CI Copies.exe
Resource
win10v2004-20230221-en
General
-
Target
DHL Original BL PL CI Copies.exe
-
Size
663KB
-
MD5
e71127f57d110a4ab4b766a4ed2bada3
-
SHA1
2d9baab03d9b20f831a8e87b54e28c94d7377ba0
-
SHA256
7417cbf823e1318517ba9b0f02ce10a5b75cd778cde237dc4e4f32f385521617
-
SHA512
e2eb72387f6b16bc5efe7bf71a66b983a008fde59d0c22dd5c788062b1bff522cdb55606f206b22da485a69ef6b1b5dbda815bcfcc89a518f2e430774a1013eb
-
SSDEEP
12288:H2N8jiZ4zypIPsxtPplTY6RhKuZh+ozNVZEbQYJ3X6Uam8fuGYL4z1Xf+iEwfdPE:H2N8jiZ4zypIPsxJTDEWhPh4L4z1Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DHL Original BL PL CI Copies.exe
Files
-
DHL Original BL PL CI Copies.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 661KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ