General

  • Target
    DHL_M-002567436735845755676678877988975877.exe
  • Size 435KB
  • Sample240429-lv3ccafg44
  • SHA256 cd533d45b704ab35ca35b9162805abb28710ca25399344812fa9f8598a93b30b
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • NSIS installer 2 IoCs

File Explorer

  • DHL_M-002567436735845755676678877988975877.exe
    .exe 435KB
  • Forthteller/Fibrillationen52/Nonveracity/Kreolerne.Ans
    .ps1 57KB
  • Forthteller/Fibrillationen52/Nonveracity/Spndkrafts.Fla
    344KB
  • Forthteller/Fibrillationen52/Nonveracity/ferietablet.txt
    465B
  • Forthteller/Fibrillationen52/Nonveracity/infringed.rec
    1KB

DHL_M-002567436735845755676678877988975877.exe

  • IMPHASH f10e4da994053bf80c20cee985b32e29
  • SHA256 cd533d45b704ab35ca35b9162805abb28710ca25399344812fa9f8598a93b30b
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
c6:40:af:36:ba:db:f3:8f:d0:08:30:c3:85:d3:76:7b:b8:8e:65:7c:96:d7:1b:fc:cb:43:8f:fd:98:d6:08:24
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Splinting,OU=Linenfold Shestens\ ,O=Splinting,L=Teigh,ST=England,C=GB,1.2.840.113549.1.9.1=#0c1a5573797374656d617469736b40446573706f6e643131362e5564
Chains

Apr 26, 2024

Minor OS version
0
Major OS version
4
Entry point
13516
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths