Static task
static1
Behavioral task
behavioral1
Sample
Signed Purchase Order.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Signed Purchase Order.exe
Resource
win10v2004-20230220-en
General
-
Target
Signed Purchase Order.exe
-
Size
563KB
-
MD5
0c53841b527f409a15e994329957af46
-
SHA1
6fe08803c15e61c099d14147b4b1f4791db08957
-
SHA256
3db10778e1d0ccc415a6ad057180e3ef8025d2f9ccfa77a14f37369189526955
-
SHA512
086ddc5fd54fbb7311c9867e2f74951211402c97ab157275cadcea73e8f13ff4bf4134a59b3dfdea6f9c5550d7b418de688d4c24d882e8b3e0c065455d499f89
-
SSDEEP
12288:sNj5AyTjCHPLxQsVE8SXjyaCax1LVV0UbfdOZi7pkrbc+:s3NiPLxQsVE8OB1p2U7gckXF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Signed Purchase Order.exe
Files
-
Signed Purchase Order.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 560KB - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ