Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order no#100894.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Purchase Order no#100894.exe
Resource
win10v2004-20220812-en
General
-
Target
024d9f82d306df06bb3a9c5ef6122c6e
-
Size
671KB
-
MD5
024d9f82d306df06bb3a9c5ef6122c6e
-
SHA1
36b04ac1e1f27803cba24559bbf0ead79f599534
-
SHA256
7cb46508d7a72ceaf60eafc5f9c3166d1329aa8e9a3a9e14e7cf5952edbf2a6b
-
SHA512
5d692ea2470c1b337c7e285dc5cb655a5f16c4f8196ad746e7afecb80ac909778e96ef5d6937e9e9a83155735f3f70183108b5afde5ad191c43523d96bab3ae4
-
SSDEEP
12288:iePoPQ77KVUAeDXvU5wtCf3OyxezE/ao4vi7rsq5OkX8Zlra9VOzo:iepDD4xYAaQ7DOkilrEVx
Malware Config
Signatures
-
Processes:
resource yara_rule sample dropper_html
Files
-
024d9f82d306df06bb3a9c5ef6122c6e.eml
-
https://e-aj.my.com/mailto:exporthcm@starline.com.vn
-
-
Purchase Order no#100894.rar.rar
-
Purchase Order no#100894.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 939KB - Virtual size: 939KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
email-html-2.txt.html
-
email-plain-1.txt