Static task
static1
Behavioral task
behavioral1
Sample
DHL Expres Shipment documents.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DHL Expres Shipment documents.exe
Resource
win10v2004-20230220-en
General
-
Target
DHL Expres Shipment documents.exe
-
Size
712KB
-
MD5
e77c90e8ff96196b410f6c0868307f6f
-
SHA1
5e60718c4927110e4adaa80bf2f20159a4004c83
-
SHA256
b10ac6368ee3c8996225a455a213cbafad3a361e093960401d0ac54f8a1db5cc
-
SHA512
fb01ac3be0893b98b03634043647a21ee1b1572941f293533e1f3624c1c49fedbe54345fbbcd00cbcbb616e19c682b4a683f43d421701ffc2b8fe189f1a389c6
-
SSDEEP
12288:3Nlta2iNx5LbzIu9+r9CKOp5FevqMiikyPfXKvmuwu2QJnDIAOvJTYR2:da1j5LA9WpaqMiiRzNu2QJUzvJTe2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DHL Expres Shipment documents.exe
Files
-
DHL Expres Shipment documents.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 704KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ