KwoL.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DHL Contract Rates Revision effective February 1st, 2024.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
DHL Contract Rates Revision effective February 1st, 2024.exe
Resource
win10v2004-20231215-en
General
-
Target
DHL Contract Rates Revision effective February 1st, 2024.bat
-
Size
716KB
-
MD5
95b155ae6087b1a1a6b6f680c029e447
-
SHA1
ac6a139e67281ce1affd80526e4fbc757abacc84
-
SHA256
21c842b3980ad1df3af813d4b0dc3200e1a82ba95bcc86e6961ce35a935cec01
-
SHA512
4a515a2c74c28c8a17f6b9c7378c41a5f037b85ef2209639455f7422bd121e99627debe0c8f09c5983cbc5ece62cba1b1d159ddf129b107084c877256bf40920
-
SSDEEP
12288:Za1hIoIFFHgeg/cBix8x2VpLVRWdyMSfhtF+Zgt4wAv82BlXpPYQAgFmSq6eJW/:aIXFxp4LVRWwXfh+2t4JU2BNpPjAgcJE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DHL Contract Rates Revision effective February 1st, 2024.bat
Files
-
DHL Contract Rates Revision effective February 1st, 2024.bat.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 704KB - Virtual size: 702KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ