xRXO.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DHL Delivery Invoice.exe
Resource
win7-20240221-en
General
-
Target
DHL Delivery Invoice.exe
-
Size
723KB
-
MD5
e9803ebe72e992dd17a5ecb2a65fb629
-
SHA1
24bd5f0b091a426434b5559fda8dddc31500f4c0
-
SHA256
2009ac39a5ed9bb927bb38b35db885425a7c40b95318efa020d4660c4c37ba26
-
SHA512
1bee01e5dd4795954cd40242e3d1ae8e71f17445a0e3a17445e45405459929c3881eef4ebea1ef850d7e9151cd18f8e329b305ecd3ef49191266f21473a868f6
-
SSDEEP
12288:4heN0pei36R88manNPrRrlrifK+yZfSGDgSgAIwBPF9P+QLiRZV6vzw6:4hvpp369JrR+MfSGsSgADF9P+miTV6vt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DHL Delivery Invoice.exe
Files
-
DHL Delivery Invoice.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 720KB - Virtual size: 719KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ