Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Purchase Order.exe
Resource
win10v2004-20220901-en
General
-
Target
Purchase Order.zip
-
Size
545KB
-
MD5
cc5b16d73491511b74c196b841d9b7fb
-
SHA1
a6731183befd09e6c6970d950b756ea1c3be16a6
-
SHA256
818e0bab11bfd5cd7c55356efce17fe8c2024a193d968cfb18f70d15a0d12951
-
SHA512
a515fffd72b3e5dfdf264d70e2f012256946b56337224c1ef64ea99d72d11d33bc7334e466aab3da0abeca72aa44e912b568a1d1031e318d569c60c9cdfbe611
-
SSDEEP
12288:bpyUo7l/0EfmW6Nem8pjq0/6P2XwXu4y/KF/+Ht/KmPW9uj8:Y0yaNemGqK6PWAubw89LbY
Malware Config
Signatures
Files
-
Purchase Order.zip.zip
-
Purchase Order.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 565KB - Virtual size: 565KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ