Static task
static1
Behavioral task
behavioral1
Sample
Purchase order_pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Purchase order_pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
Purchase order_pdf.gz
-
Size
754KB
-
MD5
a8a4e9dbb6c1c6d694de84af88babed4
-
SHA1
5fc7418dea4995990e51bdd186d6c8932e1f073d
-
SHA256
ea363893bfddb8b28e3030fb25ffb842dd466c82ef496b39f9c883feb1b42f41
-
SHA512
c9dee11696fa39561dfc3a9039e805db8db8299b348492b3b64005772bb2391f5d054a05e5ecd8218a884791de2d642f593924c9db375a16a805efe02d6b3703
-
SSDEEP
12288:DsHsseF639AQX2iuLn/v5ZZS4OSVlfRE5kto5TM9ibAR6zvgeAmRTXQgABYOx:AHFeFc2biI/h3fXfRRtW1TgeAyBe
Malware Config
Signatures
Files
-
Purchase order_pdf.gz.rar
-
Purchase order_pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 789KB - Virtual size: 789KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ