PO & DATASHEET_5[.]zip | Triage

Submit
Reports

Overview

overview

Static

static

1

DATA SHEET.exe

windows7-x64

DATA SHEET.exe

windows10-2004-x64

PURCHASE ORDER.exe

windows7-x64

PURCHASE ORDER.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

DATA SHEET.exe

Resource

win7-20230220-en

warzonerat infostealer persistence rat

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

DATA SHEET.exe

Resource

win10v2004-20230220-en

warzonerat infostealer rat

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

PURCHASE ORDER.exe

Resource

win7-20230220-en

azorult collection infostealer spyware stealer trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral4

Sample

PURCHASE ORDER.exe

Resource

win10v2004-20230220-en

azorult infostealer trojan

windows10-2004-x64

4 signatures

150 seconds

General

Target

PO & DATASHEET_5.zip
Size

270KB
MD5

99ad8a1311a9383d02cf2d12641cfe88
SHA1

88f887dd77936560b411a731a91224d618fcd139
SHA256

f323712babedfe8df9d62d85d38b3f5307c7b0fa8fa70baddf7e6e7ba8aed5c3
SHA512

5a9d1318f2c335acb28ef62348496fbf94ca2e80e3f474c6b15719f0f1591812e4a968bf423a9300255d166da516c6b9c5b4505853fc6bea71821b78e00a4de9
SSDEEP

6144:yio/58sDnRWURkZRKMsVrgglxudSBc7u6K7luYCCGe2R2SvN:yioGERW2kZ8MsVvHudULyoa

Score

1^/10

Malware Config

Signatures

Files

PO & DATASHEET_5.zip
.zip
DATA SHEET.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PURCHASE ORDER.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy