Static task
static1
Behavioral task
behavioral1
Sample
DHL Invoice.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
DHL Invoice.exe
Resource
win10v2004-20240226-en
General
-
Target
DHL Invoice.exe
-
Size
793KB
-
MD5
a506795f20f50ba28417e1520cc1838b
-
SHA1
81e75356c4e2a92351f11d22ee3836325fe571d0
-
SHA256
af69e50524ba63cfcbaaa2de4d15434743f2f34239ad34228e4eadde55bbeae6
-
SHA512
1a17e5cf161adabb3dc2520e2e0e484485d1d3bca347f3848d1baa5097e07d6092643723fd01bad50dcfd3cbd9534db2ee4b165cf263a6b342dac0e1965c7b4a
-
SSDEEP
12288:BCsLXMhHwgG3zG5GXMDZbtc3vJq1tVA5HIKkwjR++5li+jvdxLa3D42K/ymjZ:YozG5GX663vk4HIJow+5lrv4Hq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DHL Invoice.exe
Files
-
DHL Invoice.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 776KB - Virtual size: 775KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ