Static task
static1
Behavioral task
behavioral1
Sample
Purchase Oder.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Purchase Oder.exe
Resource
win10v2004-20220414-en
General
-
Target
12a9ef1ebfa6ee37ef562648360c40a9757e7a94ae75e22a1f72bb91aee691e6
-
Size
401KB
-
MD5
973c7395c6c17721ae35d2586d007155
-
SHA1
78e4c127e5212fd27bec5a52f6734804a63dd6a5
-
SHA256
12a9ef1ebfa6ee37ef562648360c40a9757e7a94ae75e22a1f72bb91aee691e6
-
SHA512
f8192509fe76a2826fcd44cedf932b880e56dc4e94afc9cd78bd8e75cdccd9b2d7e554d19af75805613b033348b99be541ebeede247de4ac9021d4ce21e1b907
-
SSDEEP
12288:WXIVixYX+5UiuK14rScUaG8dg8L7ejYXRlRGQR52cRe:MIgjz4QOHzXRlRGQHtc
Malware Config
Signatures
Files
-
12a9ef1ebfa6ee37ef562648360c40a9757e7a94ae75e22a1f72bb91aee691e6.zip
-
Purchase Oder.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 400KB - Virtual size: 399KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ