Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PURCHASE ORDER.exe
Resource
win10v2004-20230220-en
General
-
Target
PURCHASE ORDER.exe
-
Size
603KB
-
MD5
a3b187ddaad0964ba378554e9464aba5
-
SHA1
482d5e1a9a0060edf1cc5301896e9e37f5f3f93f
-
SHA256
9838762770b976da7f518470265df29bc7b6f0f2a67dc35a3bd44db01636da97
-
SHA512
32f953cc56c32204b0b3464da8bdc4273fdcc4dd86e1de0142fc4cd9ce800791ca180a46c5a3c706e94151a39eaffc06e4fe3662c409e9a55dda37e275adb29b
-
SSDEEP
12288:D6aq57I2+0R3Pt3tUjpmQlITvVx+oJtC4qw:m37rijp5l8vv1JtCnw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PURCHASE ORDER.exe
Files
-
PURCHASE ORDER.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 601KB - Virtual size: 600KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ