Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
PURCHASE ORDER.exe
Resource
win10v2004-20221111-en
General
-
Target
PURCHASE ORDER.zip
-
Size
8KB
-
MD5
06ef3e0eab21a98fca55056fe73bbfd0
-
SHA1
b65bb3b6bd57659e0ce605e17d61248687250b10
-
SHA256
cb0cc00127f40549832f423400571af4b1ab3500d5336e4da6bae019bcbceab2
-
SHA512
a5bf8c35f9c25cac2d8f037f0a2911c9ce9f3c8b81099afa6b9c8b1c9ff183c7dbbb5316ffca98e8305a2d407b09785b2bd41c1de879a67a1a135973716b22fb
-
SSDEEP
192:UC+q83lAfxDcrdoNEOg3d9kWGueg+FzOWw79cFHk0MQQI:w+VKAWGueg+ORGjMg
Malware Config
Signatures
Files
-
PURCHASE ORDER.zip.zip
-
PURCHASE ORDER.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ