Static task
static1
Behavioral task
behavioral1
Sample
DHL Parcel Receipt_pdf.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
DHL Parcel Receipt_pdf.exe
Resource
win10v2004-20240226-en
General
-
Target
DHL Parcel Receipt_pdf.gz
-
Size
746KB
-
MD5
2ff3fd65c6fad4a8d0c8a3eaa83452ab
-
SHA1
e6cfce9a587b3e07801d4ac1f8dc97b2b5b9faf3
-
SHA256
6e041c223275155b530b0c1a6ebcfca0f81b312ef61b01324465883825fb8594
-
SHA512
90e3fc572aa8ed1b22501400d6a77f6fa6ad57fcc1597e935f44144892ac2819b16dce9dd1397711bbbc830401d52d932989204e53ec88ed26fda8aa64d1d008
-
SSDEEP
12288:Tm02xu55v3gEi1DNk717mqiIJI1jkJEq+Ld44CVci3mKmKEOXX6rCtQkaML/Bcj9:TauXH6Dk17BI1jkcC+kXPv1D2j3f3V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DHL Parcel Receipt_pdf.exe
Files
-
DHL Parcel Receipt_pdf.gz.gz
-
DHL Parcel Receipt_pdf.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 396KB - Virtual size: 395KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ