Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
PURCHASE ORDER.exe
Resource
win10v2004-20220812-en
General
-
Target
PURCHASE ORDER.exe
-
Size
271KB
-
MD5
57f91f0dcb872e7dbd77234aa1b3fdde
-
SHA1
b2f9efd4d87280cc488c909f1179611311118b42
-
SHA256
689d5d74f9864c8bff8abfd655046bdf5f4e7c9931472fbb8a2ed18799e7ec97
-
SHA512
6bfaa485e510f5508fbc155544ad0696688438199df31f36a1dcb4cd9ea9474af185d29fd2708a083a012f1a6801be0fbe01da1b0def0f9a78f36200800c48af
-
SSDEEP
6144:S1In7/0hmduI6MIV6K0wto2421C487bsZGEk:WQgmdJIVXGRvvs
Malware Config
Signatures
Files
-
PURCHASE ORDER.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 270KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ