Static task
static1
Behavioral task
behavioral1
Sample
DHL shipment arrival.exe
Resource
win7-20240221-en
General
-
Target
22ff191b6e24fa02380bfd8a5adda6e9b3d9bc6af65943cdfda51198a1b532ef.7z
-
Size
20KB
-
MD5
4051984ca3ee80e9394c4bbbe8933300
-
SHA1
64fdd67468aa8863d87d328500b4b48d9654b90e
-
SHA256
22ff191b6e24fa02380bfd8a5adda6e9b3d9bc6af65943cdfda51198a1b532ef
-
SHA512
6ad695cb7e109e04a24985471d975dcfd3d156e912f1b08487995a26782243a1647224c588d70486b3f8fa2bde2ee92db850575ff558ec1ec991d5777dac63a5
-
SSDEEP
384:J3g6SQWvUvMgzQDFLMCOj0onXgBRVzhVzy5nauU5JxBPNJdKg/6cW:K+JWODwRVFRonadrPMpt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DHL shipment arrival.exe
Files
-
22ff191b6e24fa02380bfd8a5adda6e9b3d9bc6af65943cdfda51198a1b532ef.7z.7z
-
DHL shipment arrival.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ