Static task
static1
Behavioral task
behavioral1
Sample
DHL Invoice_AWB#62698098813.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
DHL Invoice_AWB#62698098813.exe
Resource
win10v2004-20231222-en
General
-
Target
DHL Invoice_AWB#62698098813.exe
-
Size
810KB
-
MD5
377bf38ceb6aaa6bc0dbe5c38a5a7270
-
SHA1
54bbf3dc4d000cdc7f9bcd74ceceeb7058818fe6
-
SHA256
b5299eeae320619ecbc6a36ed9ddd7c7aef9f91779539f1c72bce38de5d82635
-
SHA512
b89ea994bf5b2a32f5f5afd12f32f2aba68beb4d43d3d52b960de81cee296ce41942746a5c8e564716ac7abb516885f608e9f5b725bb71afa53b2d146024a6c0
-
SSDEEP
24576:dhR2HKizPWwm+h4lMQvqcVv1boZKaX7Rlcch5b:dObIk4lMl+tbpaHco
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DHL Invoice_AWB#62698098813.exe
Files
-
DHL Invoice_AWB#62698098813.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 807KB - Virtual size: 807KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ