Static task
static1
Behavioral task
behavioral1
Sample
new_order_PO10701_DEMOO_SRL.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
new_order_PO10701_DEMOO_SRL.exe
Resource
win10v2004-20230220-en
General
-
Target
new_order_PO10701_DEMOO_SRL.exe
-
Size
645KB
-
MD5
76f73b00e8abfe1aa4384ebf9a0c7540
-
SHA1
0867ad423041485d49c29448c96a60559077adb6
-
SHA256
a2568c55311566d7907ad76b9b833d696ca45eb06b06e581a1e673d4442c613e
-
SHA512
6f8e928fc74ee5dece02d1fb5079db9304c132f721c5aa2cb99515ae8479d51decbccb64cb62873573f5fb3d6fd408153af04d490c4fbb7c2407661540c708b1
-
SSDEEP
6144:n2UnS45yDwEtTaLcxc5xhXnDGrj4x2he6PMXYjMVEiPMcI2PKDiJ1bdpOE2w0ezn:nagLcGzSRjnZG0i9pd88d3TmOOvm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource new_order_PO10701_DEMOO_SRL.exe
Files
-
new_order_PO10701_DEMOO_SRL.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 639KB - Virtual size: 638KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ