Static task
static1
Behavioral task
behavioral1
Sample
Order to Purchase DOC_PO.20051011_060223.ace
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Order to Purchase DOC_PO.20051011_060223.ace
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
out.ace
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
out.ace
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
Order to Purchase DOC_PO.20051011_060223.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
Order to Purchase DOC_PO.20051011_060223.exe
Resource
win10v2004-20221111-en
General
-
Target
Order to Purchase DOC_PO.20051011_060223.ace
-
Size
401KB
-
MD5
3de0367d8fd512ec8b4c62e67c6700c0
-
SHA1
39aa9a0ab59f3f93c24aa9c6e3a2b7200271a831
-
SHA256
8bc2a80321c01b51ff4896895730ccda0b34f2a1cacc2bba849b4b208ff197d8
-
SHA512
cfc2a5a692b445e7befa6b295179b416f2ca99b4e44235d359298f7acb418d47a907b037d3e5814da223d083af479ed56dd4209956c00a377961f39972544d0d
-
SSDEEP
12288:YaO/hw4kpKI/6MVAgJTezEyRm0slq+/MP1jcv23:YFwXpV/VVAgJWRshUPhe23
Malware Config
Signatures
Files
-
Order to Purchase DOC_PO.20051011_060223.ace.ace
-
out.ace.ace
-
Order to Purchase DOC_PO.20051011_060223.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 561KB - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ