63dc3a9bb1abdf611d5d864326bd19c2 | Triage

Submit
Reports

Overview

overview

Static

static

Purchase O...RJ.exe

windows7_x64

Purchase O...RJ.exe

windows10-2004_x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

Purchase Order_PDF.ARJ.exe

Resource

win7-20220414-en

lokibot collection spyware stealer suricata trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

Purchase Order_PDF.ARJ.exe

Resource

win10v2004-20220414-en

lokibot collection spyware stealer suricata trojan

windows10-2004_x64

0 signatures

0 seconds

General

Target

63dc3a9bb1abdf611d5d864326bd19c2
Size

666KB
MD5

63dc3a9bb1abdf611d5d864326bd19c2
SHA1

b1f48165702c1c6e5428c06ec286014bc69197d4
SHA256

5a19eb6632c933e1a001dca81e9647141155df6b87065dd3e538387ac52c37ce
SHA512

747bd456d8e6b8e3c01088268bb12210c8c7d1c58e2b68684ff830ad250b9d2c043d423fc27d3b22773cc0c9cff3a075c4f6351860cb7c7548e4643586e81750
SSDEEP

12288:0IOtDE7Y6GE7jorFGPZbv880vjCpjPSFa1gQoTi2CriRkPzYrQTsWUJ/NH2sREK:0IME86GkjorFwvJ0vjXFBg2CORkPz1At

Score

N/A

Malware Config

Signatures

Files

63dc3a9bb1abdf611d5d864326bd19c2
.eml
forwarded-original.68592
.eml
Purchase Order_PDF.ARJ.rar
.rar
Purchase Order_PDF.ARJ.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 508KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-plain-1.txt

© 2018-2024

Terms | Privacy