PURCHASE ORDER #PO-004-023[.]DOC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PURCHASE ORDER #PO-004-023.DOC.exe
Size

571KB
MD5

38d70f854c058261923d4e38b26d0b3a
SHA1

9560a9e307e3220a9d4736f8777a576a09f4d514
SHA256

3b5ac4dabb34a13b2deef8dd1844b125c592e6eac2801a2c69c09b4b44675320
SHA512

49bd75d3393590214eb311f8b02086f62056b58bb43d8d3a025ed25293f55f956f57c7c0c843b71fa69ff03036a43c7edf7837c836415dcb83d93fe68789b5e0
SSDEEP

6144:XY/AbtfaGLsltdtfXZO1xPY3fE57qdbA9p6KPZnZ1lLDbXXam3rtRI4f2VCZkPve:XYAaGLy93fweciKBnZ195RJf2iHmk

Score

1^/10

Malware Config

Signatures

Files

PURCHASE ORDER #PO-004-023.DOC.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 565KB - Virtual size: 565KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ