Static task
static1
Behavioral task
behavioral1
Sample
Approved purchase order number PO2022070012.exe
Resource
win7-20220718-en
General
-
Target
Approved purchase order number PO2022070012.exe
-
Size
592KB
-
MD5
e06695c163531f7089ca1b243ee8873f
-
SHA1
aa90d5f607fcdf8bce905a5f1ba8e2de4765fdf3
-
SHA256
6e69038d76d420bc65eedac8eb5c5b727303efdff971bb7ad8b8f3b4deee8a45
-
SHA512
7be6f6bb944a17898efaee35c56337437d0399fccefe13bd1649fbb58a68ba4bd847b22849599b90708b64e51c8963952d79cb001910268c23bdf6e58fe7a890
-
SSDEEP
12288:uVBu2uwghbf7lnVjr9fpQnucpnfOaP/AuDNtzgt:uVlWZ5BBfUZGi/AuD
Malware Config
Signatures
Files
-
Approved purchase order number PO2022070012.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 589KB - Virtual size: 589KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ