Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER-PDF-.exe
Resource
win7-20230220-en
General
-
Target
PURCHASE ORDER-PDF-.exe
-
Size
707KB
-
MD5
3fd20182a833020d50543d952d69db33
-
SHA1
0f441ba23572e9884873c4e3151342b354cba048
-
SHA256
496812217f923899da536782942ea5c95a679d55552ab81c8ec2c15c9ba58502
-
SHA512
f16543ca329c9afbb28bebf49e3270bd0b36cb5b4c52c655fb83114db39faa40873013c0a7334a8e17a28ca50c77f443b22d4feb59f5698d2de835c960e695f9
-
SSDEEP
12288:FTVx0YPX/NqPsD0GE8vJKenfu5Y6N6JDw2PN07UeXl1qKIRM:FTgHPsAGEyoam5Y6V2l07UiIR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PURCHASE ORDER-PDF-.exe
Files
-
PURCHASE ORDER-PDF-.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 694KB - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ