Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Purchase Order.exe
Resource
win10v2004-20220812-en
General
-
Target
Purchase Order.exe
-
Size
847KB
-
MD5
5c83278e7c3112c5d053e45e9276155d
-
SHA1
5246a2fca9a45f77a63e0ff9db4001d506a87a9c
-
SHA256
0e2a3243365380d4d8e6f64f6162935b1e8a366f02c574151234b48f25d0de6e
-
SHA512
d965c2497f8bedacf7181b0c1096c1d17fb7464507f523ad18ed44e25fc3d97a2d69d930b82358a9aa89feb0038851d26ec872b71197c108266fd122195ca458
-
SSDEEP
12288:mdV7uikFg7Kr4foOyNvxvOAd2tN79+kFcl8ahq:qlubg7KUgOyNJALFcllh
Malware Config
Signatures
Files
-
Purchase Order.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 830KB - Virtual size: 829KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ