Static task
static1
Behavioral task
behavioral1
Sample
DHL INV _AWB.exe
Resource
win7-20240903-en
General
-
Target
dc2c24764665917d9279c138b65c03adb3bf1e2f662157c2e95fdd323f08ad1b
-
Size
659KB
-
MD5
d4f7b1d1ae45658a39a39e5981c56280
-
SHA1
8ad9b69ae9b2aad5d716881be5ced24aaba31c6b
-
SHA256
dc2c24764665917d9279c138b65c03adb3bf1e2f662157c2e95fdd323f08ad1b
-
SHA512
d9b2087f30f35cbd0e406a15890395c7469ad3650726e54e1d8b84335e89994e89cdb260d3d1804e8c0cd2dcc9091bdf7b2445ba621b26704a204419bd526a9d
-
SSDEEP
12288:4hV+zbzhlb0JlfXdDJnY2IYuhqHcGbY0zPUBQSsg5tOKRSADmfVY8vMYnfMW/w:4hV+bMlfX9i37RGvzk9sgDOKfR8vMofM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DHL INV _AWB.bin
Files
-
dc2c24764665917d9279c138b65c03adb3bf1e2f662157c2e95fdd323f08ad1b.zip
Password: infected
-
DHL INV _AWB.bin.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 832KB - Virtual size: 831KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ