xVHb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DHL_7981540523_17072024093710__11.pdf.exe
Resource
win7-20240704-en
General
-
Target
25072024_0726_24072024_DHL_DOCS_17072024093710__11.pdf.z
-
Size
581KB
-
MD5
6c86330c873d4d2e70025aa7f19f1178
-
SHA1
e2c27552a75b38804df9f734fa2f9d02371d13ed
-
SHA256
e047bcb2855f819226732da0091e6d459e0484da9e74544c6764c2e13bbb44f4
-
SHA512
a874fbc402568d87aea76f92fab23edf10faa14bfb6a22cf3a527dc275f5bd80ac1fa6ecabedba053eff97a540e1b0f4fc87d6c773f4125d1c1fb4bcb0b03ff9
-
SSDEEP
12288:6+Eap5ywupHSxcmKbg+B+bDTd8yEvRTDFznMutJlI3i:6+5ipjg+B+bDxeFtftJlh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DHL_7981540523_17072024093710__11.pdf.exe
Files
-
25072024_0726_24072024_DHL_DOCS_17072024093710__11.pdf.z.rar
Password: infected
-
DHL_7981540523_17072024093710__11.pdf.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 601KB - Virtual size: 601KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ