Static task
static1
Behavioral task
behavioral1
Sample
Purchase order PO045793 from Voile Trading Co.,Ltd.exe
Resource
win7-20220414-en
General
-
Target
f201f5ed829e08dbd5ccb40533f26010f5c3e75134fc1da3f9ed56eec6077300
-
Size
237KB
-
MD5
15cdaba40d68b1aaaa46e176b94dd946
-
SHA1
6df51e167bb25b675f0f3b79f2ceb52426ca8292
-
SHA256
f201f5ed829e08dbd5ccb40533f26010f5c3e75134fc1da3f9ed56eec6077300
-
SHA512
8cec8b6392b21fdbb04c061c916c9b296547c3ed7fbb0570052ae4163eef10708a72c170f338245c0dbd76167cb35cdc52b35d7304ab6f523a57f806e60b8fab
-
SSDEEP
6144:eNrtqEJ6ETFCOJPr/8Bhr4DoNI5gV9G/wTkGA3H0xSNPoBYO:eNr7nd8BaDdgVM4Tk30xoZO
Malware Config
Signatures
Files
-
f201f5ed829e08dbd5ccb40533f26010f5c3e75134fc1da3f9ed56eec6077300.zip
-
Purchase order PO045793 from Voile Trading Co.,Ltd.exe.exe windows x86
489dac1a8118893ec872ada929df1c44
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
DeleteFileW
VirtualProtect
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringEx
HeapSize
GetStringTypeW
WideCharToMultiByte
HeapReAlloc
RtlUnwind
LoadLibraryW
OutputDebugStringW
GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
HeapAlloc
EncodePointer
DecodePointer
RaiseException
GetLastError
HeapFree
SetLastError
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetStdHandle
WriteFile
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
Sleep
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
WriteConsoleW
user32
EndDialog
GetSystemMetrics
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcW
DestroyWindow
DialogBoxParamW
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadStringW
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 260KB - Virtual size: 260KB