Purchase Order doc[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Purchase Order doc.exe
Size

596KB
MD5

29d981b71f9e87662333184d5e1450e3
SHA1

543d1320ec43d4129964363ac360f2b9aff3d744
SHA256

47795270f01e2a50c0c5b3b4f9ba4207c10b7b371eede689d0151bdeddc03bcf
SHA512

c9b805d245eb860a636ffc6a06247ebc583d449003a2928cf6ea01cebd29d7cf45495a33a625826ba178d4fa94f738c1f2e26d4a879deab9e727d343da1d025a
SSDEEP

12288:Ljh62iN9k8fiplMGbvh7wdRMfQMVLAiY:fo1v5fipXJkTIQMVRY

Score

N/A

Malware Config

Signatures

Files

Purchase Order doc.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 588KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ