Static task
static1
Behavioral task
behavioral1
Sample
ORDER PO-2303-6234.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ORDER PO-2303-6234.exe
Resource
win10v2004-20230220-en
General
-
Target
ORDER PO-2303-6234.zip
-
Size
543KB
-
MD5
a901a728760705fd9320c0d3a3af1ad2
-
SHA1
6858ea7456f24f84775ce08494b2759e3b8a2b4f
-
SHA256
9b53564139ba762faba5cf4b30fb2579b6b2bd4984c7d003a7c3970b2ebb9ffa
-
SHA512
70de027a94cf4888284dd9c7ea0554fb6f029f65bf1fe518424b8b142cf815f7b0d4b5754c4856bee7fbfe2d67c4a90268b237e9f1fc328a99a738f479170eb9
-
SSDEEP
12288:TaNF+5jbiuCADaex1r4h1rbUHTwEX1O6h2LQyilHc:TQF453+1XUztX1O6k+c
Malware Config
Signatures
Files
-
ORDER PO-2303-6234.zip.zip
-
ORDER PO-2303-6234.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ