Static task
static1
Behavioral task
behavioral1
Sample
DHLINV1708023 - 1301512300.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
DHLINV1708023 - 1301512300.exe
Resource
win10v2004-20230703-en
General
-
Target
DHLINV1708023 - 1301512300.exe
-
Size
998KB
-
MD5
d36de44bf023570b2f83fde6e95842dd
-
SHA1
b9200cb7cbf75f8f399ec7752a7dfaef5f3acf12
-
SHA256
29ea2e83d8bb49b7b646895e04c08bf60760a79cec2d761ccbee7704216323cf
-
SHA512
2b8847f1dfcdc4fdddd0a6830e61f56776f1f1335418b5c73fa49a760ed32003a77a0829ea712e81aac81457425079183cc6fc6912a35dbfc61d78c946530ffd
-
SSDEEP
12288:g2iNsXDl+CPLnid2sxF+pAz127hoc5etv4GuHkkz0FxycEgh2uWM+kz:g1g7LQqdRQAHkkzkTh2uB+kz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource DHLINV1708023 - 1301512300.exe
Files
-
DHLINV1708023 - 1301512300.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 996KB - Virtual size: 995KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ