purchase order[.]exe

General

Target
purchase order.exe
Size 900KB
Sample230428-e5ekpsbg58
SHA256 bce664433cf5bc9dd22b054ddb25edd926ba0b6124c2f5d0f99dcdcef356a715
MD5 34771d0b1e8f0272c615bdff843ba81f
SHA1 a6bc011cfc0f9f5499735a9fcd18591decdcca60
SHA512 abfb8bd1bb892f8d90b441e5e225e975cebd05adebb0c881c4044a8e0853dc86b666a394c56826228706a73b80e69f88718d29e545014036ab1ebe143d23a5f5
SSDEEP 12288:AmnwE+eThujPMOXN2qCcV4G1fXzZMuopLzl032OK6D:AoD3TUEOXwPC7XzZMucW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
purchase order.exe

File Explorer

purchase order.exe

.exe 900KB

purchase order.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 bce664433cf5bc9dd22b054ddb25edd926ba0b6124c2f5d0f99dcdcef356a715
MD5 34771d0b1e8f0272c615bdff843ba81f
SHA1 a6bc011cfc0f9f5499735a9fcd18591decdcca60
SHA512 abfb8bd1bb892f8d90b441e5e225e975cebd05adebb0c881c4044a8e0853dc86b666a394c56826228706a73b80e69f88718d29e545014036ab1ebe143d23a5f5
SSDEEP 12288:AmnwE+eThujPMOXN2qCcV4G1fXzZMuopLzl032OK6D:AoD3TUEOXwPC7XzZMucW
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

630946

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

purchase order.exe

mscoree