Static task
static1
Behavioral task
behavioral1
Sample
DHL Invoice_UTJU01GTKE.exe
Resource
win7-20230712-en
General
-
Target
DHL Invoice_UTJU01GTKE.exe
-
Size
797KB
-
MD5
c56ae0f0eb03a51df60ffd2f98d3bcb7
-
SHA1
1e2be5bf0d6ee53ffade3cbd94ff52c15021a199
-
SHA256
bb94337fc61ca086607933c1f8fa917fc40880e2e935f6db65c3434ffa4a5fc7
-
SHA512
22cc6baf4e6eef3afb04ae45d872dd60ce821853ec558cf9c4cd401c15b633db48f0d544e5e0b63a6003d3922e14725468473e14f36fb130aa96f18290c30b77
-
SSDEEP
12288:FEKaJ6yY2+9eLYfZohoPFAZs26HH8bLGPs32PBg:t/9eUHmZD4SGPskB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DHL Invoice_UTJU01GTKE.exe
Files
-
DHL Invoice_UTJU01GTKE.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 794KB - Virtual size: 794KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ