Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order.exe
Resource
win7-20230220-en
General
-
Target
Purchase Order.exe
-
Size
1.4MB
-
MD5
e255bbfb7fb545f908137146fd950dd9
-
SHA1
44177088b79f4465a768df35cc04ab82dededcb4
-
SHA256
e65641bdd1d31a37d1caa1cbf41d05fa9e7b0caf3c5b531ba66d32c0a3a94406
-
SHA512
eb91378f1f2a6414d50cc0ce90b40f52a7978d2993541183c78cc2e9662417a0d088db6504f2533075408ae627e691e37be2dd927395993b3f6d37e75824f1d0
-
SSDEEP
24576:/JxsqB3kj9nCe2r0vcDgU9H8tWAV1IfMrfEKv64z3hllgrTULbRTJY9woz/qM:/JxJRkj1zz024AfcMrMo6gxbgq9Y9/z/
Malware Config
Signatures
Files
-
Purchase Order.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ