Static task
static1
Behavioral task
behavioral1
Sample
Purchase order 189.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Purchase order 189.exe
Resource
win10v2004-20220901-en
General
-
Target
Purchase order 189.zip
-
Size
591KB
-
MD5
b0be29f70267cde79b84999a5f05093a
-
SHA1
77e1f802356ffd8c823cc538dce789b710fdd769
-
SHA256
4519b9dbcab0200a12bb4b77aef95c5ac73f5bb756a5d5736744f20f01a71bb8
-
SHA512
d62cf6e39823a70ba4e16db34a12e773d9d29087dabd16cea06827270189cbfe84a817354fa4194b01d752dbf9f1b3cb23afba58f55c8c12b81822848c9a06a8
-
SSDEEP
12288:XBpeJKX9FsWSSPLnsT+bioD7i4zkL+KPmm8rkDetYrqVfx2WCFnTLx:XBp0KNqWnLsTOLkL+KPm/YKBfxZCpx
Malware Config
Signatures
Files
-
Purchase order 189.zip.zip
-
Purchase order 189.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 858KB - Virtual size: 857KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ