Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order Specification.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Purchase Order Specification.exe
Resource
win10v2004-20230220-en
General
-
Target
Purchase Order Specification.exe
-
Size
967KB
-
MD5
ff8b0be6beb421eb1679d9d45ba001d5
-
SHA1
f56a011e441f6ffb00fea0221e1825d69fd812a5
-
SHA256
6960c8a08fff5fa174f6f8e39ac8fc2a678a5a918b109b2e8d5c90460515e666
-
SHA512
7e94f5a4404c3c36a23068e01184dde98a413c757fabaa144f0fbc81b5ba9b2db4a77d022f1c3cada584ce92ce234e48b4e75b51f16581ced5df1f687ee71113
-
SSDEEP
12288:9FlLKHFjcsqUWGV+gB5BR+BbRd7kM6HMG0i9c/HoL8d/1bCY6vsYJRdwUWJ97JRv:7GYgdqnl6pc/HoOlCYasYJ4J9L2kX
Malware Config
Signatures
Files
-
Purchase Order Specification.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 754KB - Virtual size: 754KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ