Static task
static1
Behavioral task
behavioral1
Sample
DHL_CBJ520818836689.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
DHL_CBJ520818836689.exe
Resource
win10v2004-20240426-en
General
-
Target
DHL_CBJ520818836689.rar
-
Size
690KB
-
MD5
a9d9abb1d8d0d15f47d390e0d905a3d1
-
SHA1
1fc909d7be4d9bc01326c565c8840b8e29b21440
-
SHA256
14ab9a7e8403193677f48b84ea034671f8e115a3053f1a87500a564ddd76d5ca
-
SHA512
936cd34a4c01c5de90c092d04e814ecce91888e488abfa6bbc8cbfff2796bdbd8ac8cb9907a522ee86f9b68a117e80019c0a696725248aea47832ed5eeaf500d
-
SSDEEP
12288:inSa1D7NyaUI17ML8gaqiqpsiKagWFknxAfKJSkRuU8yi0tmqr54/3D:in3F/17MggaqiqpstGHQS0uU9i0tT5i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DHL_CBJ520818836689.exe
Files
-
DHL_CBJ520818836689.rar.rar
-
DHL_CBJ520818836689.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 691KB - Virtual size: 690KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ