rDHLSHIPMENTNOTIFICATION[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

rDHLSHIPMENTNOTIFICATION.exe
Size

628KB
MD5

b6b225e5106be36aa9bc17dc901087d0
SHA1

653f5991819d45411f43140b10a58f05a162f93b
SHA256

0691d99c393b0ae398a1096ddfb0179bacc2818f3b1d9a6c620d094fd09f8bc8
SHA512

10531bc44b6479fa0c7d5ab057bb3b16fc1777caf6a7f03c5825c3c27c013a6bbd369e2d1ffe17ca2ac9c55de4214ab916fd17015b869a38fd6eefb7a2a28d8f
SSDEEP

6144:Hd+X4aHy9Jp+YOSOWclzPZbBR697+OboPVLoZ8Z04RbkigBRbkr1dNzsVLbOZM0l:HQTypYDlPhO97YNKmNkNkFYRmQ9VUEi

Score

1^/10

Malware Config

Signatures

Files

rDHLSHIPMENTNOTIFICATION.exe
.exe windows x64

Code Sign

54:2d:a8:0f:b9:10:c1:fc:08:2f:09:88:da:34:51:db
Certificate

Issuer

CN=Mozilla Cooperation 2023\ ,C=CN

Not Before

05/03/2023, 09:18

Not After

05/03/2024, 09:18

Subject

CN=Mozilla Cooperation 2023\ ,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d6:05:ea:a7:73:ea:39:ad:7c:84:5d:57:5f:f3:11:1c:fa:03:0b:3a:31:5b:ee:fe:e7:2e:e1:e9:7f:5b:51:21
Signer

Actual PE Digest

d6:05:ea:a7:73:ea:39:ad:7c:84:5d:57:5f:f3:11:1c:fa:03:0b:3a:31:5b:ee:fe:e7:2e:e1:e9:7f:5b:51:21

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Mozilla Cooperation 2023\ ,C=CN

27/02/2023, 09:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 621KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

54:2d:a8:0f:b9:10:c1:fc:08:2f:09:88:da:34:51:dbCertificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

d6:05:ea:a7:73:ea:39:ad:7c:84:5d:57:5f:f3:11:1c:fa:03:0b:3a:31:5b:ee:fe:e7:2e:e1:e9:7f:5b:51:21Signer

Signature Validations

Verification

27/02/2023, 09:32 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 621KB - Virtual size: 620KB

.rsrc Size: 1KB - Virtual size: 1KB

54:2d:a8:0f:b9:10:c1:fc:08:2f:09:88:da:34:51:db
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

d6:05:ea:a7:73:ea:39:ad:7c:84:5d:57:5f:f3:11:1c:fa:03:0b:3a:31:5b:ee:fe:e7:2e:e1:e9:7f:5b:51:21
Signer

27/02/2023, 09:32
Valid: false

.text
Size: 621KB - Virtual size: 620KB

.rsrc
Size: 1KB - Virtual size: 1KB