Static task
static1
Behavioral task
behavioral1
Sample
DHL Express_D09884445.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
DHL Express_D09884445.exe
Resource
win10v2004-20230703-en
General
-
Target
DHL Express_D09884445.exe
-
Size
495KB
-
MD5
e7d0fee78fbbd99cc4d5fbede8a87f1e
-
SHA1
b20ac6c0c1880785878030c2d1a415b2649032db
-
SHA256
2039b244c42b06c3133712d5ac6819bb3a913fc3fa837c2f533aa9eef6380024
-
SHA512
94b8a9e742ef394b8a76ce25b7d790aad2e0dd58ee5029459ea5bbe5066ac526d72ad5afff840c008931c0affbbb9b2ee08f1a9d43678c889ee09f862c7a3268
-
SSDEEP
12288:4qTrQaSejL8Zm9Yfk3nGtTktmile5HVjgoLUzVN+7:4qTrQaSejL8Zm9Yf8w5iU5ZTaVN+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DHL Express_D09884445.exe
Files
-
DHL Express_D09884445.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 493KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ