General

  • Target
    Shipping Details_PDF.exe
  • Size 266KB
  • Sample231121-lchj8ade72
  • SHA256 05a6812ba5b589a313844306d4efef4d0ffbf3395136dc1b45f986c842f0972d
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • Shipping Details_PDF.exe
    .exe 266KB

Shipping Details_PDF.exe

  • SHA256 05a6812ba5b589a313844306d4efef4d0ffbf3395136dc1b45f986c842f0972d
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
e5:cf:17:5d:2f:ad:ea:e1:76:c2:e0:98:aa:7d:2d:2e:8f:93:08:e6:df:34:25:a2:57:56:52:bf:c2:a9:a2:53
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=94349,CN=Telegram FZ-LLC,O=Telegram FZ-LLC,L=Dubai,ST=Dubai,C=AE,1.2.840.113549.1.9.1=#0c11696e666f4074656c656772616d2e6f7267,1.3.6.1.4.1.311.60.2.1.2=#13054475626169,1.3.6.1.4.1.311.60.2.1.3=#13024145,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains

Nov 1, 2023

Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths