Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
PURCHASE ORDER.exe
Resource
win10v2004-20220812-en
General
-
Target
PURCHASE ORDER.r00
-
Size
655KB
-
MD5
81e040df644d953dc8a480ef8f9ed376
-
SHA1
d055972703d7449cf2da42be14f3d20f40b21f69
-
SHA256
e60fd9eb1a485ee19231301ea58edb810428338c9b5c6d74dd76bec932e85b81
-
SHA512
5965907ff4a23cc833b5aa9f427f54d4afefeef169c7a2a216b0ed8835bafbadf869069e1f4c429410072f61a9559a3ced62c798f7a335923e27a89aa68bccd5
-
SSDEEP
12288:YNg6KRVTEPgEmmMXv/9KEhBdSTxUbuq53Oe8nzwuHlypvFGpJD3v8h/BYa:Yw3T8NmmM/tBdSibh53T8zh2NuJDUhZ9
Malware Config
Signatures
Files
-
PURCHASE ORDER.r00.rar
-
PURCHASE ORDER.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 783KB - Virtual size: 782KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ