Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
PURCHASE ORDER.exe
Resource
win10v2004-20221111-en
General
-
Target
PURCHASE ORDER.zip
-
Size
474KB
-
MD5
0bf090d02bb4605d1be4bf403b23ad14
-
SHA1
781ef85a69fb998f14d43e0cbb0ea159d9a895f7
-
SHA256
200f9860513df8e3536eb7e2c7f0d62efe10aeaee4a6ce1e5c6012a84a650892
-
SHA512
f46e21190b8da294245bc34f9777fdc13f05a2dcb0fcfa435949bb2001a8eb30c3b0734c3187ba1018b9686b668c6286e461a0d696b439ed7a3b8908107b7db8
-
SSDEEP
12288:vyxvJ+vEdm0y97YIfmtVB+qb9vtnYAgLSRsUYAnC9s44LynUJ:axx+vE0fmHEqbLnY/Sk99cynO
Malware Config
Signatures
Files
-
PURCHASE ORDER.zip.zip
-
PURCHASE ORDER.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ