Static task
static1
Behavioral task
behavioral1
Sample
DHL_AWB_NO__907853880.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
DHL_AWB_NO__907853880.exe
Resource
win10v2004-20230621-en
General
-
Target
DHL_AWB_NO__907853880.exe
-
Size
12KB
-
MD5
7d7f13f7d03a59523ba69dce62f1dc56
-
SHA1
5a7fb1ba0bc13d34eaa7b4698e1d8052e320545e
-
SHA256
b82291de6b50625fbe64293024d4b7d3f1bc874e14d8a6c613b56cf4c5854d30
-
SHA512
6f89f7b0bec59df6fc1549ad01bd09d65f12da3f659ed7ad422e41bc849fd24db7a54efc7cb6b6f057420e65eec65a4215b5d85d81b172fd8a3ceba3014c5330
-
SSDEEP
192:/qwFkb7H0rKTW2eOF93JrPCxo6XW5V87W1tfe3AIfJp6myRRW3ZD1ofy0xofy0R+:7UTcOFDDUo6XWSsG3nHhGfxGfxE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DHL_AWB_NO__907853880.exe
Files
-
DHL_AWB_NO__907853880.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ