Static task
static1
Behavioral task
behavioral1
Sample
DHL Shipping Documents.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
DHL Shipping Documents.exe
Resource
win10v2004-20240508-en
General
-
Target
11062024_1418_11062024_DHL Shipping Documents.pdf.7z
-
Size
605KB
-
MD5
d0adb4ae166b357effd39022f97c6b48
-
SHA1
c0babbb73783c1d988b8f778e272ddc04ab229ec
-
SHA256
280588b036c282661993f9f6cad6d8e5ea070a7b8346b21ab0dee79caf651db5
-
SHA512
2bc82ccc27711c0e73ddfff05f27c3c745596e68da06c1401cf506c04c998de8e5959f6ce421dfd28d1875819a0599eea9e27148602776bdaa667b0053146102
-
SSDEEP
12288:e1bEiWPIMEOQf4MfMEoDO/SMAfLZKrwVqUh0hTWHilcoimiBmYXlAqZUZY6:edEiWEOULW7dTQkVq0W3iIElAqZb6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DHL Shipping Documents.exe
Files
-
11062024_1418_11062024_DHL Shipping Documents.pdf.7z.rar
Password: infected
-
DHL Shipping Documents.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ