Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Purchase Order.exe
Resource
win10v2004-20220812-en
General
-
Target
Purchase Order.exe
-
Size
824KB
-
MD5
8cabaeb06333e51398220c19e9a5ef69
-
SHA1
4fe15e909e5c4045d7dbd0e1301ca84252be6dd1
-
SHA256
4cd55ea131fe62b78dcb60f85a67a802e579dcef77a652731758a264257e2a80
-
SHA512
ed57b60809de2b64f2af1ab2cc4a68227d1d814016553b807b5627daa2a2f55b32b3ed0a7712e7c53783266da04f77db0e5d8b96c4dbd126dd94ec64696912e1
-
SSDEEP
12288:6xYdowlHfh/kwlxa+NsWWmgGQENG/UYa/PJADqjJ5n:XPHJ/DxavgNln5jr
Malware Config
Signatures
Files
-
Purchase Order.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 821KB - Virtual size: 821KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ