Static task
static1
Behavioral task
behavioral1
Sample
Dhl shipment documents 00020494940050509606000.exe
Resource
win7-20240903-en
General
-
Target
a6dd566155d73f0f88bd9967205b5eda136cf2fb11ec1807aa0100d0a0cfbdce
-
Size
335KB
-
MD5
e207d2f637cdac37a18763cf8393c71c
-
SHA1
6f0c5f08e62fedf0e5934bd3a81bba4879d135f9
-
SHA256
a6dd566155d73f0f88bd9967205b5eda136cf2fb11ec1807aa0100d0a0cfbdce
-
SHA512
3ac6be8c024de45de82ea72b23c1a3902adb3c957c6f00e3507504a48f1555e2cf39745df3b4593fb1e26f6bda7d3d2af3c07227431c918ced2c559bf0f235d1
-
SSDEEP
6144:CWFjb9kuGGNy6CaaH7WbpGh1KWCk7nGVh3ZeC5zhvh9hBj+U8/xy8TpaPf61d:99kWtCaw7OGpl7nQJeCZ9C/NAf61d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Dhl shipment documents 00020494940050509606000.exe
Files
-
a6dd566155d73f0f88bd9967205b5eda136cf2fb11ec1807aa0100d0a0cfbdce.rar
-
Dhl shipment documents 00020494940050509606000.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 474KB - Virtual size: 473KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ