Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Purchase Order.exe
Resource
win10v2004-20220414-en
General
-
Target
0bb1ef1b5da51503d3eacf1ecb66e7205bdb3aeab888bd7959ebb674f1eab631
-
Size
458KB
-
MD5
39872a554bfc7e2af6dddd5dcd63b2bf
-
SHA1
0becbdec9afaa381026b552784292a1384c3d933
-
SHA256
0bb1ef1b5da51503d3eacf1ecb66e7205bdb3aeab888bd7959ebb674f1eab631
-
SHA512
0e7aa55bf7336d67d308ec297c44ad3d878ee4ad0f12f7cee50f33f82580431b1191e4aeb110fabb1b25ed3c6029ceebeb6124435f2a313b46b86e011b0770de
-
SSDEEP
12288:BwE3TVTQ9uPi8k2FBhhEwjMFtJKsxz9b6m:jawBk8B1mtNNV
Malware Config
Signatures
Files
-
0bb1ef1b5da51503d3eacf1ecb66e7205bdb3aeab888bd7959ebb674f1eab631.iso
-
Purchase Order.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 341KB - Virtual size: 341KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ