Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order..exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Purchase Order..exe
Resource
win10v2004-20221111-en
General
-
Target
Purchase Order..exe
-
Size
681KB
-
MD5
0eda9f3db64c507ae3dfca2d07d2d479
-
SHA1
c79d54ac3b3a5a55afe5329d9757ffd2ae4b870d
-
SHA256
64d60461811d52c28b607030e62c33c4b04e2835c199d5121c5bc062b4bd3152
-
SHA512
334293aeff017a0895ede53811b7da1ab9b1d0b73a3c3e701609596287b517fffc4202d0e49a6928a8de3cc20b01b723838e872803bdc4c3a3e3c2d9047c3010
-
SSDEEP
12288:4faJdRhQmOyemi1bFsOX6NTnrtOXA+/0CPZfBtqNRvfAzaQE5n:4faJdAjsOX6NTnrtOXA+/0C+aun
Malware Config
Signatures
Files
-
Purchase Order..exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 679KB - Virtual size: 679KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ